A few prerequisites
- Router must have at least ~8MB free space (preferrably extroot)
- Must have at least 32MB of RAM and swap on
In my case I’m running
- OpenWRT Barrier Breaker 14.07 x86 on Virtaulbox with 256MB RAM.
This configuration has been tested on these routers
- TP-Link TL-WR842N/ND v2 (3GB extroot, 512MB swap) ar71xx
- Asus RT-N14U (1,5GB extroot, 512MB swap) RAMIPS
I assume that you have met the prerequisites stated above, therefore in this guide I will not tell how to configure your router with extroot and swap.
Softether needs a few packages to work correctly, therefore we have to install them
opkg update
opkg install zlib libpthread librt libreadline libncurses libiconv-full kmod-tun libopenssl
The packages take up approximately 2,5MB of free space.
After the depending packages have been installed there are two ways to install softether
- Using precompiled binary packages from mikmoe or my webpage, please note that only ar71xx and brcm47xx is available from mikmoe and atheros, ramips, brcm63xx, x86 is available from my webpage , therefore if your router has any other chipset such as lantiq you have to compile the packages yourself. If you have ar71xx, brcm47xx, ramips, brcm63xx, atheros feel free to skip PART 2a of this guide and continue with installing the package by following PART 2b.
- Compiling the packages yourself.
PART 2a – Compiling Softether for your router
Prerequisites: PC or VM with Debian based distribution, ~5GB of space.
Connect to the PC on which you are going to compile.
To compile packages on Debian based distribution you have to install specific packages.
sudo apt-get update
sudo apt-get install -y subversion make gcc g++ libncurses5-dev libghc-zlib-dev libreadline-dev libssl-dev gawk bzip2 patch xz-utils git unzip
Clone OpenWRT Buildroot
git clone git://git.openwrt.org/14.07/openwrt.git ./barrier_breaker
cd barrier_breaker
Add Softether for OpenWRT repository to OpenWRT Buildroot feeds file
echo "src-git softethervpn https://github.com/el1n/OpenWRT-package-softether.git" >> feeds.conf.default
Update OpenWRT SDK feeds and install softether into OpenWRT SDK.
./scripts/feeds update
./scripts/feeds install softethervpn
Make default configuration for OpenWRT SDK
make defconfig
Configure architecture and which packages to compile
make menuconfig
Choose the target system by clicking enter while on “Target System”, in my case it is x86.
Choose the architecture and press ENTER
After choosing architecture head to Network->VPN. Navigate to “softethervpn” and press space two times, to enable the compilation of package.
Now press ESC until you’ve arrived to the screen below.
Press ENTER.
It should exit the OpenWRT SDK configuration and you should be ready to compile.
NB! The compilation on Intel Xeon E3-1225v2 with 4 cores takes approximately 20 minutes. So plan your time accordingly.
When you are ready to compile the packages replace the X with the amount of cores you have access to. In my case four, this will speed up things immensely.
make prepare -jX
i.e
make prepare -j4
Build the softether package, once again replace X with number of cores. This process took approximately 5 minutes on my setup.
make package/softethervpn/compile V=99 -jX
i.e
make package/softethervpn/compile V=99 -j4
The compiled package should be available at
./bin/[ARCHITECTURE]/packages/softethervpn/softethervpn_4.15-9538_[ARCHITECTURE].ipk
in my case
./bin/x86/packages/softethervpn/softethervpn_4.15-9538_x86.ipk
Connect to the server where you compiled the firmware and download it, in my case I will use scp.
scp [USERNAME]@[IP_ADDRESS]:~/barrier_breaker/bin/[ARCHITECTURE]/packages/softethervpn/softethervpn* /tmp/
Now install the package
opkg install /tmp/sfotethervpn*
If everything went correctly it should look like this.
PART 2b – Downloading the precompiled packages and installing them
I will use ar71xx as an example here.
NB! Yo do not need to do this if you already did Part 2a
Head to mikmoe or my webpage and look for corresponding package, in my case “softethervpn_4.14-9529_ar71xx.ipk”
Download the package
cd /tmp/ && wget [HYPERLINK]
In my case
cd /tmp/ && wget http://b.mikomoe.jp/download/1423519871/attach/softethervpn_4.14-9529_ar71xx.ipk
Install the package
opkg install softethervpn*
PART 3 – Configuring Softether administration password
Start the server
/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpnserver start
Check if everything works correctly
/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpncmd
- Choose 3
- Write check
- Write exit
If everything works it should look like this
Setup password for administering server
/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpncmd
- Choose 1
- Press ENTER
- Press ENTER
- Write ServerPasswordSet
- Input your password
- Repeat your password
- Write exit
Enable Softether VPN to start on boot
/etc/init.d/softethervpnserver enable
PART 4 – Port forwarding
To use Softether you have to open below listed ports.
TCP 443, TCP 992, TCP 1194, TCP 5555
There are two ways to do this
1)Automatically by using commands written below
NB! You will disconnect after executing firewall restart command, it is Ok and should not be feared.
wget http://vpslv.tirlins.com/openwrt/portforward.txt -q -O - >> /etc/config/firewall
/etc/init.d/firewall restart &
2)Manually by inputting the ports in LUCI
Open your routers webinterface and head to Network–>Firewall–>Traffic Rules
Add your traffic rules
Example
After you’ve added them click Save & Apply
PART 5 – Configuring Softether
Download Softether server manager from Softether downloads page
For the Linux enthusiasts out there: There is no native Linux client, but the server manager works very well if you run it through wine.
Launch the Server manager.
Click New setting
Enter the server IP and administration password, press OK
Double click on the created server.
Check “Remote Access VPN Server” and click “Next”
Click Yes
Click OK
Click Exit
Now you can configure L2TP support, in my case I will use l2TP, but you can choose as you like, it is always possible to enable it later.
Check what you need and set the connection Pre-Shared key.
Click Ok
Choose if you want to use VPN Azure, in my case I will not use it, because it is just too slow.
Click Ok
Here we can add users, just for the sake of testing we create one here.
Click Create Users and input username and password.
When done click exit.
Now we will set up local bridge since SecureNAT is slow by itself and will be even slower on a router.
Select “Local bridge setting”
PART 6 – Setting up Local bridge
I will provide two different ways to configure your network
a) All VPN clients are in the same subnet as local DHCP clients of your router
I.E if your computer has IP 192.168.1.2 then if someone connects to your VPN he will be assigned 192.168.1.3
b) VPN clients will have their own subnet
I.E Your computer has IP 192.168.1.2, if someone connects to your VPN he will have 192.168.50.2
PART 6a – VPN Clients are in the same subnet as your local clients
- Select “Virtual Hub” “VPN”
- Check “Bridge with New Tap device”
- Write into “New Tap device name “soft”
- Click “Create Local-Bridge”
Click OK
If everything went well the bridge status should be “Operating”
Now open up Luci (Webinterface) and head to Network->Interfaces
Click on Edit
Head to “Physical settings” and check “Ethernet Adapter: “tap_soft” ”
Click “Save & Apply” At the buttom of page.
We are done! Now every client who connects will be given IP address of your lan subnet and everything should work out of the box.
Part 6b – VPN clients are in different subnet than local clients
- Select “Virtual Hub” “VPN”
- Check “Bridge with New Tap device”
- Write into “New Tap device name “soft”
- Click “Create Local-Bridge”
Click Ok
If everything went well the bridge status should be “Operating”
Now open Luci (Webinterface) and head to Network->Interfaces
Down below interfaces click “Add new interface”
Name the interface “vpn”
And under “Cover the following interface” select “tap_soft”
When done click “Submit”
In next page under “General setup”
- Write IPv4 address 192.168.50.1
- Choose IPv4 netmask 255.255.255.0
Click “Save & Apply”
Now scroll down and click on “Setup DHCP Server”
Click “Save & Apply”
Now head to Network->Firewall
Find the lan->wan zone and click edit
Scroll down to “Covered networks” and check “vpn”
Click “Save & Apply”
Everything is ready! Clients who connect to your VPN will be assigned 192.168.50.x addresses.
Thank you for reading this guide!
Thanks to Lincoln Lee. Without his easily understandable Softether guides I would have never started using Softether and made this guide.
Also thanks to el1n for building the makefile, without his repository and webpage we would not be able to download precompiled packages or compile ones ourselves!
Guide made by Alberts Saulitis. If you intend to translate or copy it, please, ask for permission by e-mailing me to 
Hi, I would like to have the SoftEther VPN client running on a DD-WRT router, do you know any good tutorial for that? Thanks in advance for your reply!
I’m sorry for the late response, but I don’t think that there are any community driven projects to allow Softether to run on DDWRT.
Hi !!!
thanks for your tutorial, i tried to follow your guide to compile the package for the latest
openwrt distribution ? I got some error that i could not get rid of 🙁
root@debian:~/chaos_calmer# make package/softethervpn/compile V=99
make[1]: Entering directory ‘/root/chaos_calmer’
make[2]: Entering directory ‘/root/chaos_calmer/package/libs/toolchain’
cp -fpR /root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libuClibc-*.so /root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libcrypt-*.so /root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libm-*.so /root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libpthread-*.so /root/chaos_calmer/build_dir/target-i386_i486_uClibc-0.9.33.2/toolchain/
cp: cannot stat ‘/root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libuClibc-*.so’: No such file or directory
cp: cannot stat ‘/root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libcrypt-*.so’: No such file or directory
cp: cannot stat ‘/root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libm-*.so’: No such file or directory
cp: cannot stat ‘/root/chaos_calmer/staging_dir/toolchain-i386_i486_gcc-4.8-linaro_uClibc-0.9.33.2/lib/libpthread-*.so’: No such file or directory
Makefile:636: recipe for target ‘/root/chaos_calmer/build_dir/target-i386_i486_uClibc-0.9.33.2/toolchain/.built’ failed
make[2]: *** [/root/chaos_calmer/build_dir/target-i386_i486_uClibc-0.9.33.2/toolchain/.built] Error 1
make[2]: Leaving directory ‘/root/chaos_calmer/package/libs/toolchain’
package/Makefile:191: recipe for target ‘package/libs/toolchain/compile’ failed
make[1]: *** [package/libs/toolchain/compile] Error 2
make[1]: Leaving directory ‘/root/chaos_calmer’
/root/chaos_calmer/include/toplevel.mk:181: recipe for target ‘package/softethervpn/compile’ failed
make: *** [package/softethervpn/compile] Error 2
I used debian 8.0 on x64
Regards
By any chance are you trying to run this on Chaos Calmer Buildroot instead of Barrier Breaker? Could you please try it with the Barrier Breaker buildroot on the same PC?
I just tested building with Chaos Calmer buildroot and it worked fine.
Which architecture are you building for?
When I was building for x86 I had a few issues, but those seem to be fixed now.
https://github.com/Alberts00/OpenWRT-package-softether/commit/bb309a18c5e9268d563e9b8be03049ea4759bf7c
Did you install all dependencies? On Debian they might be named differently.
edit: Seems like ar71xx can only compile on Chaos Calmer, I will look into it and report.
Hello Alberts00
do you know where ipkf for sotfetherclient /softetherbridge/softherserver / softethercmd for openwrt X86 architecture can be downloaded ?
not ar71xx..ipk or brcmxxx.ipk… i’m running Openwrt X86 in a virtual machine.
i would like to give a try to Softther.
please let me know.
Cheers !!
PS : thank you Albert !!!!
Would be really cool to have i386 binaries ! I’m tring to compile to i386 geode and i’m struggling a bit ! But before i annoy you with my errors i whant to double check everything !
Cheers.
Hey!
I’ve added the x86 packages, they should now be automatically compiled for new Softether VPN versions 🙂
http://vpslv.tirlins.com/openwrt/packs/chaos_calmer/softethervpn_4.19-9605_x86.ipk
I haven’t tested it, so if there are any issues, please tell me.
I’ve tryed on a fresh openwrt 15.05 with only 2 interfaces (br-lan LAN static ip 192.168.2.1 and eth1 WAN static ip 192.168.1.50) and the check gives fail on the network
Checking ‘Network system’…
Connect Failed. (0)
Fail
This seems to be related to this issue
https://github.com/el1n/OpenWRT-package-softether/issues/17
Unless you’re using SSLv3 when running Softether you shouldn’t have any problems running it, apart from the check failing.
Hello alberts00! According to your instructions, I successfully installed and use SoftEterVPN on a router TP-Link TL-WDR4300 OpenWrt Barrier Breaker 14.07! Many thanks!
But I tried to use it on a router with OpenWrt x86 Chaos Chalmers 15.05 or 15.05.1 on real hardware and the virtual machine in Hyper-V and get a problem with the configuration – can not create a “Remote Access VPN Server” and can only “Site-to-site VPN Server or VPN Bridge” https://drive.google.com/file/d/0B6Dosqok4ZSJQjBGUHVGMklhT0k/view?pref=2&pli=1
And SoftEther settings are reset after a reboot of the router.
If you use Barrier Breaker 14.07 x86 everything is working fine.
This is a problem 15.05 or x86 or SoftEther?
Hello!
I was able to reproduce the issue, most likely it was caused by the vpnbridge service, could you please try stopping it and then setting up the server?
/etc/init.d/softethervpnbridge stop
/etc/init.d/softethervpnbridge disable
http://i.imgur.com/c691Vw3.png
After
/etc/init.d/softethervpnbridge stop
/etc/init.d/softethervpnbridge disable
“Remote Access VPN Server” is available and I was able to configure it,
but it had on the router vpncmd ServerPasswordSet do
https://drive.google.com/file/d/0B6Dosqok4ZSJaXZlYmtkS0VHYjA/view?pref=2&pli=1
https://drive.google.com/file/d/0B6Dosqok4ZSJYU54SHNjeE5iOU0/view?pref=2&pli=1
But after reboot it
https://drive.google.com/file/d/0B6Dosqok4ZSJZm1ZWFE4NUI5V1U/view?pref=2&pli=1
no tap_soft interface and in vpnsmgr.exe again password does not match, the settings were not saved
Hi Alex!
I do also have a TP-Link WDR-4300 with Chaos Chalm but i cant connect. i can manage it with the Software and it seems all running fine. Only when i disable the Firewall, i can connect.
Do you have any advice for me?
Everything works after installation make
/etc/init.d/softethervpnbridge stop
/etc/init.d/softethervpnbridge disable
The settings are saved if you make
/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpnserver stop
/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpnserver start
before to restart the router.
This can also be done in LuCI: System -> Startup “softethervpnbridge” and “softethervpnclient” “Stop” “Disabled”. Also disable softetervpnklient at 14.07 it off.
The settings are saved if you make in LuCI: System -> Startup “softethervpnserver” “Stop” “Start” before to restart the router.
alberts00 many thanks for the help and for the blog!
Why i cannot run softethervpn client on OpenWrt? i mean OpenWrt as the client of softethervpn
No one has said that you cannot, but it has not been tested.
If you have any experience/issues, please share.
Can you please upload your .ipk for AR71xx to somewhere? mine always fail every time starting vpnclient
Hey!
It should be available here[1], have you tried running it?
[1] http://vpslv.tirlins.com/openwrt/packs/
Hello – I am trying to complile and build for mvebu architecture to be used on a WRT1700AC running gargoyle 1.9.0 (based on chaos calmer) I manged to get the ipk bult but when I start the server I get vpnserver: can’t load library ‘libreadline.so.6’
Any ideas?
Hello!
Have you installed the required packages?
opkg install zlib libpthread librt libreadline libncurses libiconv-full kmod-tun libopenssl
I did that at the beginning and everything reported installed ok. But then I did a force reinstall of libreadline and it can’t find a candidate to install. I have no idea where to look for that package for mvebu.
root@Gargoyle:~# opkg install libreadline –force-reinstall
WARNING: Package libreadline is already installed, forcing removal and reinstallation
Removing package libreadline…
Finished removing libreadline.
ERROR: No package named libreadline found, try updating your package lists
root@Gargoyle:~# opkg install readline
ERROR: No package named readline found, try updating your package lists
I did an opkg update and opkg install libreadline and it says it installed correctly. It looks like it’s running now 🙂
Thanks for the quick headslap – the server is running fine.
Closer anyway – I get this – I’ll troubleshoot it a bit more.
Checking ‘Network system’…
Connect Failed. (0)
Fail
Its because support for SSLv3 was dropped on Chaos Calmer openssl package. The check will fail, but AFAIK there shouldn’t be issues running Softether unless you force it to use SSLv3.
It was a little bit disussed here https://github.com/el1n/OpenWRT-package-softether/issues/17
Thanks for your help. I was able to get the server up and running – sort of. I can connect to it. Gargoyle doesn’t have the same interface settings UI though for the zones. Is there any way to do that through the command line the way you did the firewall?
I’m going to try getting a vanilla openwrt going and see if that works out. Thanks for the work you put into this guide. Much appreciated!
Hello alberts00!
I compiled softether for x86_64 platform.
But immediately after the installation on the router I get an error Segmentation fault, and the server does not start.
https://drive.google.com/file/d/0B6Dosqok4ZSJejllOGtEazJFeXM/view?pref=2&pli=1
You can fix this? Thank you.
Hey
Could you please share information about the environment, could it be that there is not enough RAM or you are trying to set up package with incorrect architecture?
I’m currently not able to look into it, though you can remind me at the end of of month and I will look into it.
For OpenWRT I use a virtual machine in Hyper-V on Windows Server 2012R2.
Machine parameters – 4 cores, RAM 4 GB or 1 GB. Two older network adapters.
For their correct operation in OpenWRT install kmod-tulip*.ipk depending on the version of OpenWRT.
I tried to install different versions of OpenWRT:
https://downloads.openwrt.org/chaos_calmer/15.05/x86/64/openwrt-15.05-x86-64-combined-ext4.img.gz
https://downloads.openwrt.org/chaos_calmer/15.05.1/x86/64/openwrt-15.05.1-x86-64-combined-ext4.img.gz
https://downloads.openwrt.org/snapshots/trunk/x86/64/openwrt-x86-64-combined-ext4.img.gz
Compiles SoftEther VPN according to the instructions of your blog changing only in menuconfig
Target System on the x86 and Subtarget on x86_64.
I compiled into a Hyper-V virtual machine on a Windows Server 2012R2 on Lubuntu 14.04.3 LTS x64.
As well as changing the way OpenWRT Buildroot depending on the version of OpenWRT:
git://git.openwrt.org/15.05/openwrt.git
git://git.openwrt.org/openwrt.git
The compilation takes place without errors and ready ipk I copy in OpenWRT, and after the installation and start getting error Segmentation fault.
The system log OpenWRT there are mistakes:
Tue Jun 14 12:16:27 2016 kern.info kernel: [ 52.499032] vpnserver[1390]: segfault at ffffffffbab0be67 ip 0000000000407324 sp 00007ffcbab0a9a0 error 5 in vpnserver[400000+197000]
Tue Jun 14 12:16:27 2016 kern.info kernel: [ 52.510540] vpnbridge[1398]: segfault at ffffffffea337e67 ip 0000000000407324 sp 00007fffea3379a0 error 5 in vpnserver[400000+197000]
Tue Jun 14 12:16:27 2016 kern.info kernel: [ 52.517834] vpnclient[1406]: segfault at 6bd8be67 ip 0000000000407324 sp 00007ffe6bd8b620 error 4 in vpnserver[400000+197000]
Tue Jun 14 12:17:04 2016 kern.info kernel: [ 88.985997] vpnserver[1407]: segfault at ffffffff92aa0ed4 ip 0000000000407324 sp 00007ffe92aa01c0 error 5 in vpnserver[400000+197000]
If compile SoftEther VPN for x86, the installation and operation takes place without errors.
Could you please also try any of the precompiled x86 packages available at http://vpslv.tirlins.com/openwrt/chaos_calmer/ ?
root@OpenWrt:~# opkg install softethervpn_4.19-9605_x86.ipk
Unknown package ‘softethervpn’.
Collected errors:
* pkg_hash_fetch_best_installation_candidate: Packages for softethervpn found, but incompatible with the architectures configured
* opkg_install_cmd: Cannot install package softethervpn.
I have the same problem. I use openwrt as a virtual machine in vmware.
Checking ‘Network system’…
Connect Failed. (0) How to do?
Please see the other comments
http://wordpress.tirlins.com/2015/03/setting-up-softether-vpn-on-openwrt/#comment-460
Hello, there, i need Softether VPN server and brige and client compiled for armv7l arch, it’s for my linksys wrt1200 router
Thanks
Are you sure you are looking for armv7l and not mvebu?
I have added mvebu, it should be compiled tomorrow.
Hello alberts00!
Please compile for x86_64! Thank you.
Will be available in about 12 hours when the packages are recompiled.
Where can I find the X86_64 version? I only see the X86 version here: http://vpslv.tirlins.com/openwrt/packs/chaos_calmer/
Thanks Thomas
Thomas, I compiled for himself 15.05.1 using another GIT. He replaced on https://github.com/el1n/OpenWRT-package-softether.git https://github.com/Alberts00/OpenWRT-package-softether.git .
https://drive.google.com/file/d/0B2zUtD3vuuuWeVFpWEZYRm9OWjg/view?usp=sharing . alberts00 take away my comment please lay out when the .IPK on its website
Hey Thomas,
I’m very sorry, there seems to be an issue compiling. The SSD ran out of space when buildroot exceeded 40GB. I will try to take a look this week.
I suppose you can use the package Alex gave meanwhile.
Hello alberts00!
Please see it https://github.com/el1n/OpenWRT-package-softether/pull/23/files to compile for LEDE. Thank you.
Hey!
Unfortunately I do not have access to the el1n repository, but I’ve added it to my fork of el1n which is being used to compile the daily packages under http://vpslv.tirlins.com/openwrt/packs/ .
My fork: https://github.com/Alberts00/OpenWRT-package-softether
Hello alberts00!
I compiled .ipk for LEDE x86_64 with your .git and again got an error segmentation fault after installation, as here https://wordpress.tirlins.com/2015/03/setting-up-softether-vpn-on-openwrt/#comment-716 . You can try to compile for LEDE x86_64? Many thanks!
Hey!
Unfortunately I’m quite busy right now and don’t think I will be able to touch the subject until Christmas.
I will do my best to look into it when possible, but if you find the cause yourself please leave a comment 🙂
I was sucesfoully running softether on openWRT chaos calmer, i’ve tryed to switch to Gargoyle but for some strange reason despite all checks are ok i can’t connect to the server.
Compiled 2016/04/24 15:39:17 by yagi at pc30
Copyright (c) SoftEther VPN Project. All Rights Reserved.
By using vpncmd program, the following can be achieved.
1. Management of VPN Server or VPN Bridge
2. Management of VPN Client
3. Use of VPN Tools (certificate creation and Network Traffic Speed Test Tool)
Select 1, 2 or 3: 1
Specify the host name or IP address of the computer that the destination VPN Server or VPN Bridge is operating on.
By specifying according to the format ‘host name:port number’, you can also specify the port number.
(When the port number is unspecified, 443 is used.)
If nothing is input and the Enter key is pressed, the connection will be made to the port number 8888 of localhost (this computer).
Hostname of IP Address of Destination:
If connecting to the server by Virtual Hub Admin Mode, please input the Virtual Hub name.
If connecting by server admin mode, please press Enter without inputting anything.
Specify Virtual Hub Name:
Error occurred. (Error code: 2)
Protocol error occurred. Error was returned from the destination server.
ps |grep vpn*
Hi!
Can u please help me. I can not connect to the Server.
Everything seems fine to me following your guide execpt the test
(Checking
‘Network system’…
Connect Failed. (0)
Fail)
but this is related to chaos calmer like u said.
I get error 789 on my Windowsdevice witch i try to connect. I tried both versions of Networking.
Hi again!
I tried to disable teh Firewall i could connect. Are there any more Settings Need to do? When i enable it, i cant connect.
THX
Finally got it work. I had to accept incoming traffic to UPD 500, 1701 and 4500 on my Firewall.
Thx
Just want to share my experience, the instructions work with the following hw/sw combo:
– TP-Link WDR4300 V1
– OpenWrt 14.07 & Softether 4.20 build 9608
– open port UDP 500 & 4500
– add server start script at LUCI initscripts under “local Startup”, since I found the server need manual restart after router reboot
– BTW, VPN clients are under a separate Subnet
Thank you for the author of the original post
Hello!
I compiled .ipk for LEDE x86_64 with this git https://github.com/fededim/packages https://drive.google.com/file/d/0B2zUtD3vuuuWZmdSSGxRYW94ZVE/view?usp=sharing This works without error and passed all tests with /usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpncmd -> 3 -> check
Hello, I followed your guide. I have a Tp-Link WR710N with 4GB ext-root, openWRT 14.07: no matter what I do, I can’t get Softether working. When I start “/usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpncmd”, I get: “root@WR710N:/usr/bin# /usr/bin/env LANG=en_US.UTF-8 /usr/bin/vpncmd
Killed
root@WR710N:/usr/bin#”
So, I can’t pass this step. I tried to use every version of Softether, from both sites and from 4.14 to 4.21: no go.
Any hint about this issue?
TIA!
Fabio
Hey, which version of WR710N is it? Do you have some kind of swap set up? If it is the 16MB RAM model it might not have enough memory, take a look at the system logs via “logread -f”.
Hello,glad to read you so soon!
I have the European version, with 32MB RAM. It has a 4GB stick with sda1 (3.5GB) and about 500MB of sda2 as swap space. I will check logread ASAP,and let you know.
Thx again!
Is this the culprit?
” 2166.750000] Out of memory: Kill process 1766 (vpnserver) score 285 or sacrifice child
[ 2166.760000] Killed process 1766 (vpnserver) total-vm:13668kB, anon-rss:8472kB, file-rss:4kB
[ 2166.770000] vpncmd invoked oom-killer: gfp_mask=0x200da, order=0, oom_score_adj=0
[ 2166.770000] CPU: 0 PID: 1768 Comm: vpncmd Not tainted 3.10.49 #3″
Yes, that’s correct. You must have additional external swap configured to run SoftEtherVPN. It seems like it isn’t configured correctly.
Hello again, you got the point! It was memory’s problem, because my swap wasn’t formatted (and so it couldn’t be activated). Now it’s all OK, as it seems.
Thank you!
In trunk OpenWRT and LEDE appeared package softethervpn_4.22-9634
Hey, thanks for the information.
Just wondering, who is the maintainer for this? 🙂
It’s an amazing post in support of all the internet visitors; they will obtain benefit from it I am sure.
Hello, I’m having this problem when I want to run any of the scripts from softethervpn:
— Alert: SoftEther VPN Kernel —
Unable to create /usr/bin/.VPN-EBB246C992.
I know this happens because the system where softethervpn is installed is read-only, but, how could I make the scripts to create this file on /tmp?
Thank you!