Setting up Softether VPN on OpenWRT

by ·84 Comments

Edit 10th April 2018
I would like to point out that the Softether package should be available from OpenWRT package manager without manual download/compilation and in most cases you will not have to follow this guide.
Huge thanks to fededim for making this happen!

Guide
A few prerequisites

  • Router must have at least ~8MB free space (preferrably extroot)
  • Must have at least 32MB of RAM and swap on

In my case I’m running

  • OpenWRT Barrier Breaker 14.07 x86 on Virtaulbox with 256MB RAM.

This configuration has been tested on these routers

  • TP-Link TL-WR842N/ND v2 (3GB extroot, 512MB swap) ar71xx
  • Asus RT-N14U (1,5GB extroot, 512MB swap) RAMIPS

I assume that you have met the prerequisites stated above, therefore in this guide I will not tell how to configure your router with extroot and swap.

Softether needs a few packages to work correctly, therefore we have to install them

opkg update
opkg install zlib libpthread librt libreadline libncurses libiconv-full kmod-tun libopenssl

The packages take up approximately 2,5MB of free space.

002

After the depending packages have been installed there are two ways to install softether

  • Using precompiled binary packages from mikmoe or my webpage, please note that only ar71xx and brcm47xx is available from mikmoe and atheros, ramips, brcm63xx, x86 is available from my webpage , therefore if your router has any other chipset such as lantiq you have to compile the packages yourself. If you have ar71xx, brcm47xx, ramips, brcm63xx, atheros feel free to skip PART 2a of this guide and continue with installing the package by following PART 2b.
  • Compiling the packages yourself.

PART 2a – Compiling Softether for your router
Prerequisites: PC or VM with Debian based distribution, ~5GB of space.
Connect to the PC on which you are going to compile.
To compile packages on Debian based distribution you have to install specific packages.

sudo apt-get update
sudo apt-get install -y subversion make gcc g++ libncurses5-dev libghc-zlib-dev libreadline-dev libssl-dev gawk bzip2 patch xz-utils git unzip

Clone OpenWRT Buildroot
git clone git://git.openwrt.org/14.07/openwrt.git ./barrier_breaker
cd barrier_breaker

Add Softether for OpenWRT repository to OpenWRT Buildroot feeds file
echo "src-git softethervpn https://github.com/el1n/OpenWRT-package-softether.git" >> feeds.conf.default

Update OpenWRT SDK feeds and install softether into OpenWRT SDK.
./scripts/feeds update
./scripts/feeds install softethervpn
Make default configuration for OpenWRT SDK
make defconfig

Configure architecture and which packages to compile
make menuconfig

Choose the target system by clicking enter while on “Target System”, in my case it is x86.
003
Choose the architecture and press ENTER
005
After choosing architecture head to Network->VPN. Navigate to “softethervpn” and press space two times, to enable the compilation of package.
006
Now press ESC until you’ve arrived to the screen below.
007
Press ENTER.
It should exit the OpenWRT SDK configuration and you should be ready to compile.
NB! The compilation on Intel Xeon E3-1225v2 with 4 cores takes approximately 20 minutes. So plan your time accordingly.
When you are ready to compile the packages replace the X with the amount of cores you have access to. In my case four, this will speed up things immensely.
make prepare -jX

i.e
make prepare -j4

Build the softether package, once again replace X with number of cores. This process took approximately 5 minutes on my setup.
make package/softethervpn/compile V=99 -jX

i.e
make package/softethervpn/compile V=99 -j4

The compiled package should be available at
./bin/[ARCHITECTURE]/packages/softethervpn/softethervpn_4.15-9538_[ARCHITECTURE].ipk

in my case
./bin/x86/packages/softethervpn/softethervpn_4.15-9538_x86.ipk

Connect to the server where you compiled the firmware and download it, in my case I will use scp.
scp [USERNAME]@[IP_ADDRESS]:~/barrier_breaker/bin/[ARCHITECTURE]/packages/softethervpn/softethervpn* /tmp/

010

Now install the package
opkg install /tmp/sfotethervpn*
If everything went correctly it should look like this.

012

PART 2b – Downloading the precompiled packages and installing them
I will use ar71xx as an example here.
NB! Yo do not need to do this if you already did Part 2a
Head to mikmoe or my webpage and look for corresponding package, in my case “softethervpn_4.14-9529_ar71xx.ipk”
Download the package
cd /tmp/ && wget [HYPERLINK]
In my case
cd /tmp/ && wget http://b.mikomoe.jp/download/1423519871/attach/softethervpn_4.14-9529_ar71xx.ipk

Install the package
opkg install softethervpn*

PART 3 – Configuring Softether administration password
Start the server
/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpnserver start

Check if everything works correctly

/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpncmd

  1. Choose 3
  2. Write check
  3. Write exit

If everything works it should look like this
015

Setup password for administering server
/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpncmd

  1. Choose 1
  2. Press ENTER
  3. Press ENTER
  4. Write ServerPasswordSet
  5. Input your password
  6. Repeat your password
  7. Write exit

016

Enable Softether VPN to start on boot

/etc/init.d/softethervpnserver enable

PART 4 – Port forwarding

To use Softether you have to open below listed ports.
TCP 443, TCP 992, TCP 1194, TCP 5555
There are two ways to do this

1)Automatically by using commands written below
NB! You will disconnect after executing firewall restart command, it is Ok and should not be feared.

wget http://vpslv.tirlins.com/openwrt/portforward.txt -q -O - >> /etc/config/firewall
/etc/init.d/firewall restart &

2)Manually by inputting the ports in LUCI
Open your routers webinterface and head to Network–>Firewall–>Traffic Rules
Add your traffic rules
Example
024
After you’ve added them click Save & Apply

PART 5 – Configuring Softether
Download Softether server manager from Softether downloads page

022

For the Linux enthusiasts out there: There is no native Linux client, but the server manager works very well if you run it through wine.

Launch the Server manager.

Click New setting

Enter the server IP and administration password, press OK
023

Double click on the created server.

Check “Remote Access VPN Server” and click “Next”
025
Click Yes
026
Click OK
027
Click Exit
028

Now you can configure L2TP support, in my case I will use l2TP, but you can choose as you like, it is always possible to enable it later.

Check what you need and set the connection Pre-Shared key.
030
Click Ok

Choose if you want to use VPN Azure, in my case I will not use it, because it is just too slow.
031
Click Ok

Here we can add users, just for the sake of testing we create one here.
Click Create Users and input username and password.
When done click exit.
033

Now we will set up local bridge since SecureNAT is slow by itself and will be even slower on a router.
Select “Local bridge setting”
036

PART 6 – Setting up Local bridge
I will provide two different ways to configure your network
a) All VPN clients are in the same subnet as local DHCP clients of your router
I.E if your computer has IP 192.168.1.2 then if someone connects to your VPN he will be assigned 192.168.1.3

b) VPN clients will have their own subnet
I.E Your computer has IP 192.168.1.2, if someone connects to your VPN he will have 192.168.50.2

PART 6a – VPN Clients are in the same subnet as your local clients

  1. Select “Virtual Hub” “VPN”
  2. Check “Bridge with New Tap device”
  3. Write into “New Tap device name “soft”
  4. Click “Create Local-Bridge”

044
Click OK
045
If everything went well the bridge status should be “Operating”
046

Now open up Luci (Webinterface) and head to Network->Interfaces
Click on Edit
047
Head to “Physical settings” and check “Ethernet Adapter: “tap_soft” ”
048
Click “Save & Apply” At the buttom of page.

We are done! Now every client who connects will be given IP address of your lan subnet and everything should work out of the box.

Part 6b – VPN clients are in different subnet than local clients

  1. Select “Virtual Hub” “VPN”
  2. Check “Bridge with New Tap device”
  3. Write into “New Tap device name “soft”
  4. Click “Create Local-Bridge”

049
Click Ok
050
If everything went well the bridge status should be “Operating”

Now open Luci (Webinterface) and head to Network->Interfaces
Down below interfaces click “Add new interface”
Name the interface “vpn”
And under “Cover the following interface” select “tap_soft”
When done click “Submit”
051
In next page under “General setup”

  1. Write IPv4 address 192.168.50.1
  2. Choose IPv4 netmask 255.255.255.0

052
Click “Save & Apply”
Now scroll down and click on “Setup DHCP Server”
Click “Save & Apply”

Now head to Network->Firewall
Find the lan->wan zone and click edit
053
Scroll down to “Covered networks” and check “vpn”
054
Click “Save & Apply”

Everything is ready! Clients who connect to your VPN will be assigned 192.168.50.x addresses.

Thank you for reading this guide!
Thanks to Lincoln Lee. Without his easily understandable Softether guides I would have never started using Softether and made this guide.
Also thanks to el1n for building the makefile, without his repository and webpage we would not be able to download precompiled packages or compile ones ourselves!

Guide made by Alberts Saulitis. If you intend to translate or copy it, please, ask for permission by e-mailing me to 055

84 comments

  1. Hi, I would like to have the SoftEther VPN client running on a DD-WRT router, do you know any good tutorial for that? Thanks in advance for your reply!

    Reply

    1. I’m sorry for the late response, but I don’t think that there are any community driven projects to allow Softether to run on DDWRT.

      Reply

  2. Hi !!!

    thanks for your tutorial, i tried to follow your guide to compile the package for the latest
    openwrt distribution ? I got some error that i could not get rid of 🙁

    root@debian:~/chaos_calmer# make package/softethervpn/compile V=99
    make[1]: Entering directory ‘/root/chaos_calmer’
    make[2]: Entering directory ‘/root/chaos_calmer/package/libs/toolchain’
    cp -fpR /root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libuClibc-*.so /root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libcrypt-*.so /root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libm-*.so /root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libpthread-*.so /root/chaos_calmer/build_dir/target-i386_i486_uClibc-0.9.33.2/toolchain/
    cp: cannot stat ‘/root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libuClibc-*.so’: No such file or directory
    cp: cannot stat ‘/root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libcrypt-*.so’: No such file or directory
    cp: cannot stat ‘/root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libm-*.so’: No such file or directory
    cp: cannot stat ‘/root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libpthread-*.so’: No such file or directory
    Makefile:636: recipe for target ‘/root/chaos_calmer/build_dir/target-i386_i486_uClibc-0.9.33.2/toolchain/.built’ failed
    make[2]: *** [/root/chaos_calmer/build_dir/target-i386_i486_uClibc-0.9.33.2/toolchain/.built] Error 1
    make[2]: Leaving directory ‘/root/chaos_calmer/package/libs/toolchain’
    package/Makefile:191: recipe for target ‘package/libs/toolchain/compile’ failed
    make[1]: *** [package/libs/toolchain/compile] Error 2
    make[1]: Leaving directory ‘/root/chaos_calmer’
    /root/chaos_calmer/include/toplevel.mk:181: recipe for target ‘package/softethervpn/compile’ failed
    make: *** [package/softethervpn/compile] Error 2

    I used debian 8.0 on x64

    Regards

    Reply

    1. By any chance are you trying to run this on Chaos Calmer Buildroot instead of Barrier Breaker? Could you please try it with the Barrier Breaker buildroot on the same PC?

      Reply

    2. I just tested building with Chaos Calmer buildroot and it worked fine.
      Which architecture are you building for?
      When I was building for x86 I had a few issues, but those seem to be fixed now.
      https://github.com/Alberts00/OpenWRT-package-softether/commit/bb309a18c5e9268d563e9b8be03049ea4759bf7c
      Did you install all dependencies? On Debian they might be named differently.
      edit: Seems like ar71xx can only compile on Chaos Calmer, I will look into it and report.

      Reply

      1. Hello Alberts00

        do you know where ipkf for sotfetherclient /softetherbridge/softherserver / softethercmd for openwrt X86 architecture can be downloaded ?
        not ar71xx..ipk or brcmxxx.ipk… i’m running Openwrt X86 in a virtual machine.
        i would like to give a try to Softther.

        please let me know.

        Cheers !!

        PS : thank you Albert !!!!

        Reply

  3. Would be really cool to have i386 binaries ! I’m tring to compile to i386 geode and i’m struggling a bit ! But before i annoy you with my errors i whant to double check everything !
    Cheers.

    Reply

  4. I’ve tryed on a fresh openwrt 15.05 with only 2 interfaces (br-lan LAN static ip 192.168.2.1 and eth1 WAN static ip 192.168.1.50) and the check gives fail on the network

    Checking ‘Network system’…
    Connect Failed. (0)
    Fail

    Reply

  5. Hello alberts00! According to your instructions, I successfully installed and use SoftEterVPN on a router TP-Link TL-WDR4300 OpenWrt Barrier Breaker 14.07! Many thanks!
    But I tried to use it on a router with OpenWrt x86 Chaos Chalmers 15.05 or 15.05.1 on real hardware and the virtual machine in Hyper-V and get a problem with the configuration – can not create a “Remote Access VPN Server” and can only “Site-to-site VPN Server or VPN Bridge” https://drive.google.com/file/d/0B6Dosqok4ZSJQjBGUHVGMklhT0k/view?pref=2&pli=1
    And SoftEther settings are reset after a reboot of the router.
    If you use Barrier Breaker 14.07 x86 everything is working fine.
    This is a problem 15.05 or x86 or SoftEther?

    Reply

    1. Hello!
      I was able to reproduce the issue, most likely it was caused by the vpnbridge service, could you please try stopping it and then setting up the server?
      /etc/init.d/softethervpnbridge stop
      /etc/init.d/softethervpnbridge disable
      http://i.imgur.com/c691Vw3.png

      Reply

      1. After
        /etc/init.d/softethervpnbridge stop
        /etc/init.d/softethervpnbridge disable
        “Remote Access VPN Server” is available and I was able to configure it,
        but it had on the router vpncmd ServerPasswordSet do
        https://drive.google.com/file/d/0B6Dosqok4ZSJaXZlYmtkS0VHYjA/view?pref=2&pli=1
        https://drive.google.com/file/d/0B6Dosqok4ZSJYU54SHNjeE5iOU0/view?pref=2&pli=1
        But after reboot it
        https://drive.google.com/file/d/0B6Dosqok4ZSJZm1ZWFE4NUI5V1U/view?pref=2&pli=1
        no tap_soft interface and in vpnsmgr.exe again password does not match, the settings were not saved

        Reply

    2. Hi Alex!

      I do also have a TP-Link WDR-4300 with Chaos Chalm but i cant connect. i can manage it with the Software and it seems all running fine. Only when i disable the Firewall, i can connect.

      Do you have any advice for me?

      Reply

  6. Everything works after installation make
    /etc/init.d/softethervpnbridge stop
    /etc/init.d/softethervpnbridge disable
    The settings are saved if you make
    /usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpnserver stop
    /usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpnserver start
    before to restart the router.

    Reply

  7. This can also be done in LuCI: System -> Startup “softethervpnbridge” and “softethervpnclient” “Stop” “Disabled”. Also disable softetervpnklient at 14.07 it off.
    The settings are saved if you make in LuCI: System -> Startup “softethervpnserver” “Stop” “Start” before to restart the router.

    Reply
  9. Pingback: 将路由器接入VPS和自动分流 – HIMMEL

    1. No one has said that you cannot, but it has not been tested.
      If you have any experience/issues, please share.

      Reply

      1. Can you please upload your .ipk for AR71xx to somewhere? mine always fail every time starting vpnclient

        Reply

  11. Hello – I am trying to complile and build for mvebu architecture to be used on a WRT1700AC running gargoyle 1.9.0 (based on chaos calmer) I manged to get the ipk bult but when I start the server I get vpnserver: can’t load library ‘libreadline.so.6’

    Any ideas?

    Reply

    1. Hello!
      Have you installed the required packages?
      opkg install zlib libpthread librt libreadline libncurses libiconv-full kmod-tun libopenssl

      Reply

      1. I did that at the beginning and everything reported installed ok. But then I did a force reinstall of libreadline and it can’t find a candidate to install. I have no idea where to look for that package for mvebu.

        root@Gargoyle:~# opkg install libreadline –force-reinstall
        WARNING: Package libreadline is already installed, forcing removal and reinstallation

        Removing package libreadline…
        Finished removing libreadline.

        ERROR: No package named libreadline found, try updating your package lists

        root@Gargoyle:~# opkg install readline
        ERROR: No package named readline found, try updating your package lists

        Reply

  12. I did an opkg update and opkg install libreadline and it says it installed correctly. It looks like it’s running now 🙂

    Thanks for the quick headslap – the server is running fine.

    Reply

    1. Closer anyway – I get this – I’ll troubleshoot it a bit more.
      Checking ‘Network system’…
      Connect Failed. (0)
      Fail

      Reply

  13. Thanks for your help. I was able to get the server up and running – sort of. I can connect to it. Gargoyle doesn’t have the same interface settings UI though for the zones. Is there any way to do that through the command line the way you did the firewall?

    Reply

    1. I’m going to try getting a vanilla openwrt going and see if that works out. Thanks for the work you put into this guide. Much appreciated!

      Reply

    1. Hey
      Could you please share information about the environment, could it be that there is not enough RAM or you are trying to set up package with incorrect architecture?
      I’m currently not able to look into it, though you can remind me at the end of of month and I will look into it.

      Reply

      1. For OpenWRT I use a virtual machine in Hyper-V on Windows Server 2012R2.
        Machine parameters – 4 cores, RAM 4 GB or 1 GB. Two older network adapters.
        For their correct operation in OpenWRT install kmod-tulip*.ipk depending on the version of OpenWRT.
        I tried to install different versions of OpenWRT:
        https://downloads.openwrt.org/chaos_calmer/15.05/x86/64/openwrt-15.05-x86-64-combined-ext4.img.gz
        https://downloads.openwrt.org/chaos_calmer/15.05.1/x86/64/openwrt-15.05.1-x86-64-combined-ext4.img.gz
        https://downloads.openwrt.org/snapshots/trunk/x86/64/openwrt-x86-64-combined-ext4.img.gz
        Compiles SoftEther VPN according to the instructions of your blog changing only in menuconfig
        Target System on the x86 and Subtarget on x86_64.
        I compiled into a Hyper-V virtual machine on a Windows Server 2012R2 on Lubuntu 14.04.3 LTS x64.
        As well as changing the way OpenWRT Buildroot depending on the version of OpenWRT:
        git://git.openwrt.org/15.05/openwrt.git
        git://git.openwrt.org/openwrt.git
        The compilation takes place without errors and ready ipk I copy in OpenWRT, and after the installation and start getting error Segmentation fault.
        The system log OpenWRT there are mistakes:
        Tue Jun 14 12:16:27 2016 kern.info kernel: [ 52.499032] vpnserver[1390]: segfault at ffffffffbab0be67 ip 0000000000407324 sp 00007ffcbab0a9a0 error 5 in vpnserver[400000+197000]
        Tue Jun 14 12:16:27 2016 kern.info kernel: [ 52.510540] vpnbridge[1398]: segfault at ffffffffea337e67 ip 0000000000407324 sp 00007fffea3379a0 error 5 in vpnserver[400000+197000]
        Tue Jun 14 12:16:27 2016 kern.info kernel: [ 52.517834] vpnclient[1406]: segfault at 6bd8be67 ip 0000000000407324 sp 00007ffe6bd8b620 error 4 in vpnserver[400000+197000]
        Tue Jun 14 12:17:04 2016 kern.info kernel: [ 88.985997] vpnserver[1407]: segfault at ffffffff92aa0ed4 ip 0000000000407324 sp 00007ffe92aa01c0 error 5 in vpnserver[400000+197000]
        If compile SoftEther VPN for x86, the installation and operation takes place without errors.

        Reply

          1. root@OpenWrt:~# opkg install softethervpn_4.19-9605_x86.ipk
            Unknown package ‘softethervpn’.
            Collected errors:
            * pkg_hash_fetch_best_installation_candidate: Packages for softethervpn found, but incompatible with the architectures configured
            * opkg_install_cmd: Cannot install package softethervpn.

            Reply

  16. Hello, there, i need Softether VPN server and brige and client compiled for armv7l arch, it’s for my linksys wrt1200 router

    Thanks

    Reply

        2. Hey Thomas,
          I’m very sorry, there seems to be an issue compiling. The SSD ran out of space when buildroot exceeded 40GB. I will try to take a look this week.
          I suppose you can use the package Alex gave meanwhile.

          Reply

        1. Hey!
          Unfortunately I’m quite busy right now and don’t think I will be able to touch the subject until Christmas.
          I will do my best to look into it when possible, but if you find the cause yourself please leave a comment 🙂

          Reply

  19. I was sucesfoully running softether on openWRT chaos calmer, i’ve tryed to switch to Gargoyle but for some strange reason despite all checks are ok i can’t connect to the server.

    Compiled 2016/04/24 15:39:17 by yagi at pc30
    Copyright (c) SoftEther VPN Project. All Rights Reserved.

    By using vpncmd program, the following can be achieved.

    1. Management of VPN Server or VPN Bridge
    2. Management of VPN Client
    3. Use of VPN Tools (certificate creation and Network Traffic Speed Test Tool)

    Select 1, 2 or 3: 1

    Specify the host name or IP address of the computer that the destination VPN Server or VPN Bridge is operating on.
    By specifying according to the format ‘host name:port number’, you can also specify the port number.
    (When the port number is unspecified, 443 is used.)
    If nothing is input and the Enter key is pressed, the connection will be made to the port number 8888 of localhost (this computer).
    Hostname of IP Address of Destination:

    If connecting to the server by Virtual Hub Admin Mode, please input the Virtual Hub name.
    If connecting by server admin mode, please press Enter without inputting anything.
    Specify Virtual Hub Name:
    Error occurred. (Error code: 2)
    Protocol error occurred. Error was returned from the destination server.

    Reply

  20. Hi!
    Can u please help me. I can not connect to the Server.

    Everything seems fine to me following your guide execpt the test
    (Checking
    ‘Network system’…
    Connect Failed. (0)
    Fail)
    but this is related to chaos calmer like u said.

    I get error 789 on my Windowsdevice witch i try to connect. I tried both versions of Networking.

    Reply

    1. Hi again!

      I tried to disable teh Firewall i could connect. Are there any more Settings Need to do? When i enable it, i cant connect.

      THX

      Reply

  21. Just want to share my experience, the instructions work with the following hw/sw combo:
    – TP-Link WDR4300 V1
    – OpenWrt 14.07 & Softether 4.20 build 9608
    – open port UDP 500 & 4500
    – add server start script at LUCI initscripts under “local Startup”, since I found the server need manual restart after router reboot
    – BTW, VPN clients are under a separate Subnet

    Thank you for the author of the original post

    Reply

  23. Hello, I followed your guide. I have a Tp-Link WR710N with 4GB ext-root, openWRT 14.07: no matter what I do, I can’t get Softether working. When I start “/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpncmd”, I get: “root@WR710N:/usr/bin# /usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpncmd
    Killed
    root@WR710N:/usr/bin#”
    So, I can’t pass this step. I tried to use every version of Softether, from both sites and from 4.14 to 4.21: no go.
    Any hint about this issue?
    TIA!
    Fabio

    Reply

    1. Hey, which version of WR710N is it? Do you have some kind of swap set up? If it is the 16MB RAM model it might not have enough memory, take a look at the system logs via “logread -f”.

      Reply

      1. Hello,glad to read you so soon!
        I have the European version, with 32MB RAM. It has a 4GB stick with sda1 (3.5GB) and about 500MB of sda2 as swap space. I will check logread ASAP,and let you know.
        Thx again!

        Reply

        1. Is this the culprit?
          ” 2166.750000] Out of memory: Kill process 1766 (vpnserver) score 285 or sacrifice child
          [ 2166.760000] Killed process 1766 (vpnserver) total-vm:13668kB, anon-rss:8472kB, file-rss:4kB
          [ 2166.770000] vpncmd invoked oom-killer: gfp_mask=0x200da, order=0, oom_score_adj=0
          [ 2166.770000] CPU: 0 PID: 1768 Comm: vpncmd Not tainted 3.10.49 #3″

          Reply

          1. Yes, that’s correct. You must have additional external swap configured to run SoftEtherVPN. It seems like it isn’t configured correctly.

            Reply

          2. Hello again, you got the point! It was memory’s problem, because my swap wasn’t formatted (and so it couldn’t be activated). Now it’s all OK, as it seems.
            Thank you!

            Reply

  26. Hello, I’m having this problem when I want to run any of the scripts from softethervpn:

    — Alert: SoftEther VPN Kernel —
    Unable to create /usr/bin/.VPN-EBB246C992.

    I know this happens because the system where softethervpn is installed is read-only, but, how could I make the scripts to create this file on /tmp?

    Thank you!

    Reply

  27. I am trying to compile SoftetherVpn for Raspberry Pi 3 BCM2710 Kernel. But i do get always this error while prepare: -r prepare: build failed include/toplevel.mk:181: make
    Is someone able to help me with this? Thanks

    Reply
  28. Pingback: Setting up Softether VPN on OpenWRT – gargoyle

  29. Hopefuly this page is still getting some attention. I used to be able to run softether on my LinkSYS 1900AC using openwrt 15.05. I recently had to reset and rebuild the router. Softether seems to install perfectly – but when I connect to it using the server manager I do not get the option to create the Remote Access VPN Server – the option is greyed out. I upgraded to LEDE to see if that would fix it and same thing. I am back down on OpenWRT but scratching my head something fierce.

    Heopfully someone has some ideas on how to proceed.

    Reply

  30. For future reference – installed on my 1700AC with OpenWRT (LEDE) installed.

    Was able to install softether from the normal repo and did not have to upload a custom build.

    I also needed to do :
    /etc/init.d/softethervpnbridge stop
    /etc/init.d/softethervpnbridge disable

    Before the Server Manager would connect properly and allow for Remote Access VPN Server to be created.

    Directions above were followed (option 6a).

    Did this as well after configuration to make sure everything saved propely.
    /usr/bin/env LANG=en_US.UTF-8 /usr/libexec/softethervpn/vpnserver stop
    /usr/bin/env LANG=en_US.UTF-8 /usr/libexec/softethervpn/vpnserver start

    Reply

  31. I have noticed you don’t monetize your page, don’t waste your traffic, you can earn extra bucks every month because you’ve got high quality content.

    If you want to know how to make extra bucks, search for: Boorfe’s
    tips best adsense alternative

    Reply

    1. The SoftEtherVPN client can not connect to the OpenVPN server. But the OpenVPN client can connect to the SoftEtherVPN server.

      Reply

  33. Hey,
    I have been using softehterVPN fore a while and would like to upgrade to 4.27
    where ever i look i cant find a recompiled version fo ar71xx
    on the other hand when trying to do so myself i am having issues.
    what is need to use your build script for Lede/openwrt 17.X and compile the latest softhether version.

    Reply

  34. Hi, thanks for the guide, i also maintain a package feed for users that want to compile there own version from the master branch.
    https://github.com/Andy2244/openwrt-extra

    Its only the server, but i try to follow the development git branch, so its the 5.1 version.

    PS: Btw there is a minor issue with softether on openwrt see: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/423
    This means without a extroot the server will constantly write data usage and timestamps information to the config file, which resides on nvram (linked to /var from /etc). Its the only package i use with this behavior, usually such log information should be written to a separate file on /var/log, which is on tmpfs aka ram. So check your servers log/timestamp config and try to minimize anything that might go into the server_config file or setup a extroot.

    Reply
  35. Pingback: KB: Install SoftEther VPN on OpenWrt Router | JeffChiu.com

  36. Hello, eldad hadas
    I am a novice with linux and I use the Archer C7 AC1750 V4 ar71xx. If you have successfully compiled softehterVPN, can you tell me how to install it. The softethervpn package of openWRT has a build error on the build system. Thank you

    Reply

  38. Hey guys, I am Leonard Rossi an expert in report writing.

    I love solving people’s problems and make them happy. That is what I have been doing for many years now.
    I have been writing since I was 12 years old and never knew it would turn out to be a full-time career. I have also been able to handle several assignments that involves writing. And I worked in three organizations as a volunteer to assist people.My interest has always been to help people succeed. And I go the extra mile to make that happen.
    I enjoy writing Thesis and have helped people from countries like Mexico.
    I work with a company whose mission is to provide quality works and make people happy. In fact, many students come to me for help on a daily basis because they know I always deliver. And I will continue to provide nothing but quality to build trust like I have been doing for the past few years.

    Academic writer – Leonard Rossi – http://www.asadeaguia.net Company

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *