If you searching to check Softether Vpn Client Manager Ios And Sonicwall Netextender Vpn Client For Mac price. Shop for Best Price How To Use Softether Vpn Mac And Virginia Tech Vpn Mac.Price Low and Options of How To Use Softether Vpn Mac And Virginia Tech Vpn Mac from.

• Softether Vpn Client For Mac
• Softether Vpn
• Softether Vpn Server Macos
• Softether Vpn Gate Mac
• Softether Mac Os
• Softether Vpn Client For Mac

Table of contents

1. 1.Walkthrough
2. 2.Features
3. 3.Architecture of SoftEther VPN
4. 4.How to Use SoftEther VPN ?
5. 5.Ad-hoc VPN
6. 6.LAN to LAN Bridge
7. 7.Remote Access to LAN
8. 8.Join a Local PC into Cloud
9. 9.Join a Cloud VM into LAN
10. 10.Cloud to LAN Bridge VPN
11. 11.Cloud to Cloud Bridge VPN
12. 12.iPhone and Android
13. 13.Windows and Mac Laptops
14. 14.Remote Management
15. 15.Building Your Own Cloud
16. 16.VPN for Network Testing, Simulation and Debugging
17. 17.Remote Access
18. 18.Comfortable Network Anywhere
19. 19.Dynamic DNS and NAT Traversal
20. 20.VPN Azure
21. 21.Penetrates Firewall by SSL-VPN
22. 22.Replacements of Cisco or other hardware-based VPNs
23. 23.Replacements of OpenVPN
    1. 23.1.Screenshots
    2. 23.2.

SoftEther VPN is one of the most powerful and easiest VPN software in the world. It is freeware, developed as an academic research project in University of Tsukuba, Japan.

Download SoftEther VPN and enjoy it today. It is open source.

Walkthrough

Read the walkthrough to grasp the key features and advantages of SoftEther rapidly.

Features

• Free and open-source software.
• Easy to establish both remote-access and site-to-site VPN.
• SSL-VPN Tunneling on HTTPS to pass through NATs and firewalls.
• Revolutionary VPN over ICMP and VPN over DNS features.
• Resistance to highly-restricted firewall.
• Ethernet-bridging (L2) and IP-routing (L3) over VPN.
• Embedded dynamic-DNS and NAT-traversal so that no static nor fixed IP address is required.
• AES 256-bit and RSA 4096-bit encryptions.
• Sufficient security features such as logging and firewall inner VPN tunnel.
• 1Gbps-class high-speed throughput performance with low memory and CPU usage.
• Windows, Linux, Mac, Android, iPhone, iPad and Windows Mobile are supported.
• SSL-VPN (HTTPS) and 6 major VPN protocols (OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP) are all supported as VPN tunneling underlay protocols.
• The OpenVPN clone function supports legacy OpenVPN clients.
• IPv4 / IPv6 dual-stack.
• The VPN server runs on Windows, Linux, FreeBSD, Solaris and Mac OS X.
• Configure All settings on GUI.
• Multi-languages (English, Japanese and Simplified-Chinese).
• No memory leaks. High quality stable codes, intended for long-term runs. We always verify that there are no memory or resource leaks before releasing the build.
• RADIUS / NT Domain user authentication function
• RSA certificate authentication function
• Deep-inspect packet logging function
• Source IP address control list function
• syslog transfer function
• More details at Specification.

Architecture of SoftEther VPN

Virtualization of Ethernet devices is the key of the SoftEther VPN architecture. SoftEther VPN virtualizes Ethernet devices in order to realize a flexible virtual private network for both remote-access VPN and site-to-site VPN. SoftEther VPN implements the Virtual Network Adapter program as a software-emulated traditional Ethernet network adapter. SoftEther VPN implements the Virtual Ethernet Switch program (called Virtual Hub) as a software-emulated traditional Ethernet switch. SoftEther VPN implements VPN Session as a software-emulated Ethernet cable between the network adapter and the switch.

You can create one or many Virtual Hub with SoftEther VPN on your server computer. This server computer will become a VPN server, which accepts VPN connection requests from VPN client computers.

You can create one or many Virtual Network Adapter with SoftEther VPN on your client computer. This client computer will become a VPN client, which establishes a VPN connections to the Virtual Hub on the VPN server.

You can establish VPN sessions, as called 'VPN tunnels', between VPN clients and VPN servers. A VPN session is the virtualized network cable. A VPN session is realized over a TCP/IP connection. The signals through the VPN session is encrypted by SSL. Therefore, you can safely establish a VPN session beyond the Internet. A VPN session is established by SoftEther VPN's 'VPN over HTTPS' technology. It means that SoftEther VPN can create a VPN connection beyond any kinds of firewalls and NATs.

The Virtual Hub exchanges all Ethernet packets from each connected VPN session to other connected sessions. The behavior is same to traditional Ethernet switches. The Virtual Hub has a FDB (forwarding database) to optimize the transmission of Ethernet frames.

You can define a local bridge between the Virtual Hub and the existing physical Ethernet segment by using the Local Bridge function. The Local Bridge exchanges packets between the physical Ethernet adapter and the Virtual Hub. You can realize a remote-access VPN from home or mobile to the company network by using the Local Bridge function.

You can define a cascading connection between two or more remote Virtual Hubs. With cascading, you can integrate two or more remote Ethernet segments to a single Ethernet segment. For example, after you establish cascading connections between the site A, B and C, then any computers in the site A will be able to communicate with the computers in the site B and the site C. This is a site-to-site VPN.

SoftEther VPN can also establish a VPN session over UDP. The UDP-mode of SoftEther VPN supports NAT traversal. The NAT traversal function allows the VPN server behind existing NATs or firewalls to accept incoming VPN sessions. You need no network administrator's special permission before setting up a VPN server on the company network behind firewalls or NATs. Additionally, SoftEther VPN Server may be placed on the dynamic IP address environment since SoftEther VPN has built-in Dynamic DNS (DDNS) function.

SoftEther VPN Server supports additional VPN protocols, including L2TP/IPsec, OpenVPN, Microsoft SSTP, L2TPv3 and EtherIP. These realizes the interoperability with built-in L2TP/IPsec VPN clients on iPhone, iPad, Android, Windows and Mac OS X, and also with Cisco's VPN routers and other vendors VPN products.

How to Use SoftEther VPN ?

SoftEther VPN is an essential infrastructure to build-up IT systems on enterprises and small-businesses.

SoftEther VPN can build-up flexible and dependable virtual network around Clouds. Amazon EC2, Windows Azure and most of other Clouds are supporting SoftEther VPN.

SoftEther VPN supports several mobile devices including iPhone and Android. Your smartphone is now a part of your on-premise or Cloud network by using SoftEther VPN.

SoftEther VPN is also an ultra-convenient tool for effective system management by IT professionals on enterprises and system integrators.

SoftEther VPN is also convenient for home users. You can be proud of using enterprise-class VPN for your home-use.

Does your network administrator hesitates to assign you a global IP address? Or Does your company has a firewall on the border between the private network and the Internet? No problem! SoftEther VPN has a strong function to penetrate troublesome corporate firewalls.

IPsec-based VPN protocols which are developed on 1990's are now obsoleted. IPsec-based VPN are not familiar with most of firewalls, NATs or proxies. Unlike IPsec-based VPN, SoftEther VPN is familiar with any kind of firewalls. Additionally SoftEther VPN requires no expensive Cisco or other hardware devices. You can replace your Cisco or OpenVPN to SoftEther VPN today.

Softether Vpn Client For Mac

Screenshots

SoftEther VPN consists of three software: VPN Client, VPN Server and VPN Bridge.

SoftEther VPN Client

SoftEther VPN Server Admin Tool

This post describes a real-world configuration of the free VPN server SoftEther. It shows how to set up a VPN for macOS and Windows clients on a Hyper-V Windows guest VM.

Our Setup and Requirements

Our situation was as follows:

• Multiple Hyper-V hosts with VMs on an internal network.
• One VM is the VPN gateway. It is configured with two NICs. One is connected to the internal network, the other to the internet.
• The VPN should provide remote access via SSTP for Windows and L2TP for macOS clients.
• It should be possible to connect to the VPN with the clients that come with each operating system. Installing additional client software should not be necessary.
• The VPN should be bridged to the local network so that VPN clients get IP addresses from the internal network’s DHCP server.
• Authentication should be performed against a RADIUS server (we use Duo Authentication Proxy).

HTTPS Certificate

SSTP is based on HTTPS. The good thing about that is that most firewalls and hotel networks should let it through. The bad thing is that we need to deal with certificates. I used a TLS certificate from our internal Active Directory root CA.

Caveat: Unreachable CRL

We are using an internal certificate authority that is not accessible from the internet. As a consequence, the CA’s certificate revocation list (CRL) is not accessible from the internet either.

The Windows SSTP client refuses to connect when it cannot contact the CRL specified in a server certificate. There are two ways around that:

1. Set the following registry values on your VPN clients: HKLMSYSTEMCurrentControlSetServicesSstpSvcParametersNoCertRevocationCheck=1 [REG_DWORD]
2. On the CA, configure a certificate template to not include revocation information in issued certificates.

Requesting the Certificate

Run the following openssl commands on any Windows or Linux machine that has OpenSSL installed. OpenSSL is part of any Splunk installation, for example (even on Windows).

Create a private key:

Create a certificate request with the private key:

• Submit the CSR to your CA
• Important: if you want to incorporate multiple server namens in the certificate, specify them in the additional attributes field as follows: san:dns=server1.domain.com&dns=server2.domain.com.com
• You get a P7B file, but SoftEther expects a CER. To convert, double-click the P7B file to open it in the certificates MMC. Locate your certificate, right-click and select All Tasks – Export. Choose the format “Base-64 encoded X.509 (CER)”.

Importing the Certificate in SoftEther

• Open SoftEther VPN Server Manager
• Click “Encryption and Network Settings”
• Click “Import” and specify the location of the CER file
• Specify the location of the certificate’s KEY file
• Enter the key’s passphrase
• While you are in that dialog:
• Disable “Use Keep Alive Internet Connection”
• Switch the encryption algorithm name to ECDHE-RSA-AES256-GCM-SHA384
• Copy your CA’s root certificate to the directory C:Program FilesSoftEther VPN Serverchain_certs

Gateway VM Configuration

On the Hyper-V host, go to the gateway VM settings and click “Enable MAC address spoofing” in the “Advanced Features” of the VM’s internal NIC.

SoftEther Configuration

Virtual Hub

Creating a Virtual Hub

• Open SoftEther VPN Server Manager
• Create a virtual hub

User and RADIUS Config

• Open SoftEther VPN Server Manager
• Click “Manage Virtual Hub”
• Click “Manage Users”
• We are managing users in RADIUS, but we need a wildcard entry here to not block everybody
• Add a single user with “User Name” set to an asterisk (*) and “Auth Type” set to “RADIUS Authentication”
• Go back to the “Management of Virtual Hub” dialog
• Click “Authentication Server Setting”
• Enable “Use RADIUS Authentication” and provide the necessary information
• Go back to the main page of SoftEther VPN Server Manager and make sure the virtual hub is online

Blocking Internet Access

In a split tunnel configuration you want your VPN clients to connect directly to the internet, not via the VPN. Split tunneling is a client configuration (see below), but you may want to enforce it by blocking all internet connections originating from VPN clients:

• Open SoftEther VPN Server Manager
• Click “Manage Virtual Hub”
• Click “Manage Access Lists”
• Add the following rules:
• Pass, Priority=10, Memo=Enable LAN access, Contents=(ipv4) DstIPv4=10.1.0.0/16
• Pass, Priority=11, Memo=Enable LAN access (reverse), Contents=(ipv4) SrcIPv4=10.1.0.0/16, DstIPv4=10.1.0.0/16
• Pass, Priority=12, Memo=Allow DHCP requests, Contents=(ipv4) SrcIPv4=0.0.0.0/32, DstIPv4=255.255.255.255/32, Protocol=UDP, DstPort=67-68
• Pass, Priority=13, Memo=Allow DHCP responses, Contents=(ipv4) SrcIPv4=10.1.0.0/16, DstIPv4=255.255.255.255/32, Protocol=UDP, SrcPort=67-68
• Discard, Priority=1000, Memo=Block everything (else), Contents=(ether) *

Network Bridge

• Open SoftEther VPN Server Manager
• Click “Local Bridge Setting”
• Select your virtual hub
• Select the LAN adatapter connected to your internal network
• Click “Create Local Bridge”
• Exit all dialogs and reboot the SoftEther VM

Protocols and Ports

Softether Vpn

L2TP

• Open SoftEther VPN Server Manager
• Click “IPsec / L2TP Setting”
• Check “Enable L2TP Server Function (L2TP over IPsec)”
• Uncheck all other options
• Specify an IPsec pre-shared key (PSK)

SSTP

• Open SoftEther VPN Server Manager
• Click “OpenVPN / MS-SSTP Setting”
• Check “Enable MS-SSTP VPN Clone Server Function”
• Uncheck the OpenVPN checkbox (unless you want to use it, of course)

Ports

• Open SoftEther VPN Server Manager
• In the listener list, delete ports 992 (function unknown), 1194 (OpenVPN), and 5555 (SoftEther remote management)

Note: when you connect to SoftEther Server Manager next make sure so specify 443 (the only remaining one) instead of 5555

Firewall

In your firewall, create rules to enable the following ports:

• SSTP: TCP 443
• L2TP over IPSec: UDP 500 and 4500

In the Windows firewall disable or delete the following rules added by SoftEther:

• SoftEther VPN Server
• SoftEther VPN Server Manager
• SoftEther VPN Command-Line Admin Tool

Softether Vpn Server Macos

Miscellaneous

Disable DDNS registration of your VPN. In unnecessarily “calls home”.

• Stop the SoftEther VPN Server service and edit the configuration file “vpn_server.config”
• In the DDnsClient section, set Disabled to true
• In the ServerConfiguration section, set DisableNatTraversal to true
• Start the SoftEther VPN Server service

Client Settings

Split Tunneling

Split tunneling refers to a configuration where only those packets are sent from a client to the VPN, that are destined for the VPN’s subnet. Everything else (including internet connections) go through the client’s regular default gateway.

Softether Vpn Gate Mac

On Windows VPN clients:

Softether Mac Os

• Open the properties of your VPN adapter in classic control panel
• Go to the advanced properties of IPv4 (and IPv6)
• Uncheck “Use default gateway on remote network”
• See Split tunneling option for MS Windows VPN connections

Softether Vpn Client For Mac

Resources