SecureNAT Configuration

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
TheyDontKnowMeSon
Posts: 9
Joined: Thu Nov 16, 2023 9:43 pm

SecureNAT Configuration

Post by TheyDontKnowMeSon » Wed Mar 19, 2025 12:45 pm

Hi Guys,

I have the following scenario: The VPN server is in the local subnet eth0 (192.168.0.0/24) with the IP 192.168.0.6. Additionally, eth1 serves as the outgoing connection for client access.

Since there is no DHCP in 192.168.0.0/24 and the available addresses are limited, I would like to configure SecureNAT.

When I create a local bridge and assign an IP to the client manually, I can access all services without issues.
However, when I disable the local bridge and enable SecureNAT (with its default 192.168.30.0/24 settings), I can no longer reach the services.

Do I need to configure a Layer 3 switch, or is it necessary to push a route to enable communication between 192.168.30.0/24 and 192.168.0.0/24?

Thanks in advance for your help!

solo
Posts: 1591
Joined: Sun Feb 14, 2021 10:31 am

Re: SecureNAT Configuration

Post by solo » Thu Mar 20, 2025 1:34 am

"Edit Virtual Hub Extended Option List" and set DisableKernelModeSecureNAT = 1

TheyDontKnowMeSon
Posts: 9
Joined: Thu Nov 16, 2023 9:43 pm

Re: SecureNAT Configuration

Post by TheyDontKnowMeSon » Thu Mar 20, 2025 7:38 am

Hi,

thank you for your reply. Sadly this did not work. I cant ping anything in the 192.168.0.0/24 network.

i tried with this route aswell 192.168.0.0/255.255.255.0/192.168.30.254 with 192.168.30.254 beeing the securenat virtual hosts network interface.

trace route output:

1 567 ms 566 ms 587 ms 192.168.30.254
2 * * * Zeitüberschreitung der Anforderung.

solo
Posts: 1591
Joined: Sun Feb 14, 2021 10:31 am

Re: SecureNAT Configuration

Post by solo » Thu Mar 20, 2025 9:20 am

"when I... enable SecureNAT (with its default 192.168.30.0/24 settings)"
"with 192.168.30.254 beeing the securenat virtual hosts network interface"

These statements are contradictory.

TheyDontKnowMeSon
Posts: 9
Joined: Thu Nov 16, 2023 9:43 pm

Re: SecureNAT Configuration

Post by TheyDontKnowMeSon » Thu Mar 20, 2025 9:34 am

yeah i changed .1 to .254 in my newest try, sry for the misconception

solo
Posts: 1591
Joined: Sun Feb 14, 2021 10:31 am

Re: SecureNAT Configuration

Post by solo » Thu Mar 20, 2025 11:14 am

Restore default SecureNAT, disable iptables/firewall, ensure that VPN client isn't locally on the 192.168.0.0/24 subnet and re-try.

TheyDontKnowMeSon
Posts: 9
Joined: Thu Nov 16, 2023 9:43 pm

Re: SecureNAT Configuration

Post by TheyDontKnowMeSon » Thu Mar 20, 2025 1:56 pm

How do i disable iptables and the firewall?

Post Reply