How to configure SoftEther as MS-SSTP VPN server

The goal is to configure MS-SSTP VPN server and also use NAT and also push the routes to the client so that we have a split tunnel on client side. In this way only traffic destined to data center goes through the tunnel. In order to give access to DRAC VLAN (10.x.x.x/16) we have added an interface to the VPN server in that VLAN. The VPN server is gateway for subnet 10.x.x.x/16 and is IP is 10.x.x.x/16

  1. Open the SoftEther VPN Server Manager. Select the server in the list and click on Connect.

    mebgmmk

  2. Select the virtual hub name and click on “Manage Virtual Hub”.

    ye9wjw0

  3. Click on “Virtual NAT and Virtual DHCP server (SecureNAT)”.

    orcnds1

  4. Click on “SecureNAT configuration”.

    rwfawut

  5. Enable and configure the virtual DHCP server. Also enable the Virtual NAT. At the end click on “Edit the static routing table to push”.

    fbn0iqt

  6. Add the routes in proper format to the form. Click OK.

    c7t4yst

  7. Save the changes and go back to the window shown in step 3. Click on Manage users. Add the users with their password. 
  8. Save the changes and go back to the window shown in step 2. Click on “Encryption and network”. We assume that the domain name such as vpn.example.com have been configured to point to VPN server. Click on “Import” and upload the proper certificate and private key. Two files X509 Certificate (*.cer) and Private Key (*.key) are needed for this purpose. If you are creating these files by copy and pasting the certificate and key, it has to be done in Linux using the editor “vi”. It should not be done in any Windows text editor.

    b0kqp9n

  9. In order to see who is connected to the VPN server and also the status, go back to the window shown in step 3 and click on “Manage Sessions”

    qx20ckl

  10. Select which port you want to use for VPN management and stop the VPN listening on other ports.

    rbwzam5

  11. Click on “Local Bridge Setting” in “Manage VPN server” window.
    Since this is a layer 3 VPN server make sure to delete all the Bridges that may exist by default between the VPN virtual interface and server physical servers. Otherwise the VPN’s DHCP server might leak to data center network which is not desirable.

    7cyu1ke