MindTouch Dream XAtom2026-05-16T22:52:54ZMindTouch Corehttp://www.softether.org/@api/deki/site/opensearch?q=vpn+gate+vpn+public+relay+servers&format=atom&offset=0&limit=100+((content:vpn content:gate content:public content:relai content:server) ((title:vpn title:gate title:public title:relai title:server)^10.0) ((path.title:vpn path.title:gate path.title:public path.title:relai path.title:server)^4.0) ((description:vpn description:gate description:public description:relai description:server)^3.0) ((tag:vpn tag:gate tag:public tag:relay tag:servers)^2.0) (comments:vpn comments:gate comments:public comments:relai comments:server)) +(type:wiki type:document type:image type:comment type:binary) +namespace:main -namespace:template_talk -namespace:help -namespace:help_talk1000001002013-03-16T11:43:53Z2013-03-16T11:43:53Zhttp://www.softether.org/9-about/What_is_different_between_SoftEther_VPN_and_VPN_Gate%3FWe have great appreciation that SoftEther Project is mentioned by many news articles around the world recently. Unfortunately, some news articles seem to misunderstandd as if SoftEther Project is exactly equal to VPN Gate Project. That is not correct. So we would like to explain the difference between two projects here.   What is SoftEther Project? SoftEther Project is to develop and distribute secure, cross-platform, easy-to-use and multi-protocol SoftEther VPN software.   What is VPN Gate Project? VPN Gate Project is to develop and distribute VPN Gate software which is a plug-in module for SoftEther VPN.   So what is SoftEther VPN? SoftEther VPN is a VPN suite. You can make your own private VPN by using SoftEther VPN. For example, you install SoftEther VPN Server in your office. You return to home, and install SoftEther VPN Client in your home. Then your home PC can connect to your office. This is Remote-access VPN. Or, you install SoftEther VPN Server in your hea193838049-about/What_is_different_between_SoftEther_VPN_and_VPN_Gate?4072024-02-27T10:32:25Z2024-02-27T10:32:25Zhttp://www.softether.org/4-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/1.Setup_L2TP%2F%2F%2F%2FIPsec_VPN_Server_on_SoftEther_VPN_ServerThe IPsec VPN Server Function is disabled by default. You can enable it easily as the following steps. Configuration Guide The VPN Server configuration is very easy.   Start VPN Server Manager Start SoftEther VPN Server Manager (which runs on Windows, but it can connect to remote SoftEther VPN Server running on Linux, Mac OS X or other UNIX). On the Server Manager, you can see the "L2TP/IPsec Setting" button. Click it.   VPN Server Manager Main Window   The following screen will appear. Each IPsec Server Function can be turned on / off on this screen.   IPsec / L2TP / EtherIP / L2TPv3 Settings Screen   The meanings of each option are followings: L2TP Server Function (L2TP over IPsec) This function is for accepting VPN connections from iPhone, iPad, Android, and other smartphones, and built-in L2TP/IPsec VPN Client on Windows or Mac OS X. Enable it if you want to support one of these devices as VPN Client.   L2TP Server Function (Raw L2TP0.85154971335211374-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/1.Setup_L2TP////IPsec_VPN_Server_on_SoftEther_VPN_Server3632013-07-09T13:08:03Z2013-07-09T13:08:03Zhttp://www.softether.org/4-docs/2-howto/6.VPN_Server_Behind_NAT_or_Firewall Your network administrator hesitates to assign you global IP address? Your company has a firewall on the border between the private network and the Internet? Do not worry. SoftEther VPN has a strong function to penetrate troublesome corporate firewalls. Dynamic DNS and NAT Traversal Unlike legacy IPsec-based VPN, even if your corporate network doesn't have any static global IP address you can set up your stable SoftEther VPN Server on your corporate network. VPN Azure If the corporate firewall is more restricted and the NAT Traversal of SoftEther VPN doesn't work correctly, instead use VPN Azure to penetrate such a firewall. 0.67679622631044-docs/2-howto/6.VPN_Server_Behind_NAT_or_Firewall4822013-03-05T04:28:47Z2013-03-05T04:28:47Zhttp://www.softether.org/4-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_ServerSoftEther VPN supports also L2TP/IPsec VPN Protocol as described here. You can accept L2TP/IPsec VPN Protocol on VPN Server. iOS, Android, Mac OS X or other L2TP/IPsec VPN compatible client devices can connect to your SoftEther VPN Server. Cisco routers or other vendor's L2TPv3 or EtherIP comatible router can also connect to your SoftEther VPN Server. The following links describe how to setup L2TP/IPsec VPN. Setup L2TP/IPsec VPN Server on SoftEther VPN Server iPhone / iPad L2TP Client Setup Android L2TP Client Setup Windows L2TP Client Setup Mac OS X L2TP Client Setup Cisco L2TPv3/IPsec Edge-VPN Router Setup 0.575528628881054-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server3622013-03-16T11:08:00Z2013-03-16T11:08:00Zhttp://www.softether.org/4-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/6.Cisco_IOS_L2TPv3%2F%2F%2F%2FIPsec_Edge-VPN_Router_Setup/Why_Cisco_Routers_with_SoftEther_VPN_Server_is_the_Best_Solution%3FThis document explains the advantage of using the combination of both Cisco Routers and SoftEther VPN Server, and using the L2TPv3/IPsec VPN Protocol to make site-to-site Ethernet Bridging VPNs between serveral sites. At a Glance of the Advantage If Only using Cisco's Low-end Routers: Cisco's low-end VPN Routers can have only 
 point-to-point L2TPv3 VPN tunnels. If you have three branches, then you have to have three VPN routers in the center in order to correspond each branches. The center VPN routers must know the fixed static global IP address of each branch Cisco routers. (Every branch must be assigned a static Global IP address.) Cisco's Low-end Routers can't Aggregate Many Branches Due to the limitation that Cisco's low-end routers don't support point-to-multipoint L2TPv3 VPN Tunnels, the aggregation of multipoint L2TPv3 VPN Tunnels from branches into one center-side Cisco low-end router is impossible. You have to Purchase High-end Cisco Routers to Aggreg0.4652774115857044-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/6.Cisco_IOS_L2TPv3////IPsec_Edge-VPN_Router_Setup/Why_Cisco_Routers_with_SoftEther_VPN_Server_is_the_Best_Solution?3802026-01-31T11:38:56Z2026-01-31T11:38:56Zhttp://www.softether.org/3-screens/1.vpnserver  SoftEther VPN Server Manager: Server Top Page   Easy Setup Wizard   OpenVPN & MS-SSTP Clone Server Function   IPsec / L2TP / EtherIP / L2TPv3 Settings Screen   Dynamic DNS Function Screen   VPN over ICMP / VPN over DNS Function Screen   vpncmd Command-line Admin Utility   Packet Log & Server Log Setting   VPN Server Log Browser   VPN Server Information Screen   Available Encryption Algorithms   Active TCP Listners Connection List   Status of a Virtual Hub   Status of the VPN Server   New Virtual Hub Creation Screen   New Cascade Connection Setting Screen   List of Cascade Connection Screen   Security Policy for a Cascade Connection   List of Current VPN Sessions   Status of a VPN Session   Mac Address Table (aka: FDB) of Virtual Hub   IP Address Table of Virtual Hub 0.3756027315093703-screens/1.vpnserver3942025-09-22T07:00:46Z2025-09-22T07:00:46Zhttp://www.softether.org/4-docs/1-manual/3/3.3Operations to administer the SoftEther VPN Server are divided into two main types. One is for the overall administration of the VPN Server while the other is for the administration of specific Virtual Hubs within the VPN Server. Here we will first explain the know-how and handling methods required to administer the entire VPN Server. The following explanation contains a description of specific methods for handling the SoftEther VPN Server Manager and the corresponding VPN command line management utility (vpncmd) command names. Please refer to 6. Command Line Management Utility Manual for details on how to use each of the vpncmd commands.   3.3.1 Administration without the need for System Stop The entire program structure of the SoftEther VPN Server has been carefully designed, so that the VPN Server process itself does not have to be rebooted regardless of the type of settings changes being made. The only exceptions whereby the VPN Server process must be rebooted are the following four cases. 0.339986108796103954-docs/1-manual/3/3.31762024-01-27T06:22:17Z2024-01-27T06:22:17Zhttp://www.softether.org/4-docs/1-manual/A/10.AAn individual user can install VPN Server at home to enable access to their home LAN from a remote location. This section will focus on using VPN Server for use as a single user.   10.10.1 Dangers of the Internet and the Need for VPN The Internet is full of individuals and groups that will attempt to commit illegal acts such as data theft or data manipulation. Many different groups manage the networks that data travels through on the Internet. This means that data could be passed through un-encrypted and leaked at any time. By using SoftEther VPN even a single user can easily set up a VPN network. They can then easily perform TCP/IP communications such as transferring files or using a remote desktop application through the VPN directly to their home network safely and securely.   10.10.2 Installing the VPN Server at Home If you have a global IP address at home you can simply install VPN Server on your home computer, then use VPN Client to connect to it through the Internet at a rem0.3372863903910234-docs/1-manual/A/10.A3372013-03-04T07:26:13Z2013-03-04T07:26:13Zhttp://www.softether.org/4-docs/1-manual/3The SoftEther VPN Server is VPN server software equipped with high performance, functionality, security, scalability and portability. The SoftEther VPN Server is the most important software in the SoftEther VPN system, and as its name implies, acts as a VPN server which supports access from remote VPN Clients, VPN Bridges and so on across a network. This server must be installed whenever the SoftEther VPN software is used in order to realize a VPN in any format. This is because the SoftEther VPN Server is the only one capable of supporting access from the VPN Client and VPN Bridge. This chapter describes each of the functions of the SoftEther VPN Server as well as how they are used. 3.1 Operating System Requirements 3.2 Operating Modes 3.3 VPN Server Administration 3.4 Virtual Hub Functions 3.5 Virtual Hub Security Features 3.6 Local Bridges 3.7 Virtual NAT & Virtual DHCP Servers 3.8 Virtual Layer 3 Switches 3.9 Clustering 3.10 Logging Service 0.336036529441674-docs/1-manual/31712024-01-17T12:50:52Z2024-01-17T12:50:52Zhttp://www.softether.org/4-docs/1-manual/2/2.4SoftEther VPN Server Manager is an administration utility for Windows that comes with SoftEther VPN Server  or SoftEther VPN Bridge. This section contains a description of how to use SoftEther VPN Server Manager. 2.4.1 What is VPN Server Manager SoftEther VPN Server Manager is an administration utility that supports Windows graphic user interface (GUI) for administering SoftEther VPN Server or SoftEther VPN Bridge by local or remote computer. Using VPN Server Manager enables you to connect to and administer SoftEther VPN Server or SoftEther VPN Bridge without learning complicated commands or operation methods. You can also administer SoftEther VPN Server / SoftEther VPN Bridge operating on a UNIX operating system from a familiar Windows terminal. Using VPN Server Manager is extremely convenient because it lets you connect to VPN Server / VPN Bridge in a remote location via the Internet. The host name or IP address of the connection destination VPN Server / VPN Bridge when connecting and the listen0.335901495859324-docs/1-manual/2/2.41652024-01-17T09:02:03Z2024-01-17T09:02:03Zhttp://www.softether.org/4-docs/1-manual/7This chapter describes the detailed procedure for installing SoftEther VPN Server to a Windows- or Linux-based server computer and configuring the default settings. For details on the SoftEther VPN Server functions, please refer to 3. SoftEther VPN Server Manual.   7.1 Before Install 7.2 Install on Windows and Initial Configurations 7.3 Install on Linux and Initial Configurations 7.4 Initial Configurations 7.5 Install on Other Unix Systems 7.6 Uninstall SoftEther VPN Server 0.33512981587774-docs/1-manual/72722024-01-19T07:56:43Z2024-01-19T07:56:43Zhttp://www.softether.org/4-docs/1-manual/4/4.4After installing SoftEther VPN Client and creating a Virtual Network Adapter, configure a connection setting to connect to the Virtual Hub of the desired SoftEther VPN Server. This section describes the information that must be entered when creating a connection setting. The settings described here are, for the most part, the same as the settings used to configure a cascade connection to VPN Server or VPN Bridge on a separate computer using the Virtual Hub of VPN Server or VPN Bridge described in 3.4 Virtual Hub Functions. The windows for editing the connection setting of the cascade connection and VPN Client are nearly the same, and the resulting operations when the connection settings are edited are also the same. Refer to the information described here when configuring a cascade connection.   4.4.1 Selecting the Proper Connection Method Creating a Connection Setting At the time SoftEther VPN Client is installed, no connection settings exist. To establish a VPN connection to SoftEther VP0.29916735276838914-docs/1-manual/4/4.42562024-01-19T07:33:17Z2024-01-19T07:33:17Zhttp://www.softether.org/4-docs/1-manual/4/4.5By using SoftEther VPN Client to define the required connection settings of a connection setting and then connecting to that connection setting, you can start the connection to VPN Server.   4.5.1 Starting a VPN Connection Starting a VPN Connection To start the VPN connection of a registered connection setting, double-click the connection setting or click [Connect] on the [Connect] menu. When VPN Client is connecting to VPN Server, the following dialog box displays the connection status in real-time. (The connection status dialog box is not displayed when the [Don't display connection status and error window when connecting to VPN Server] option for the connection setting is enabled.) Dialog Box Displaying the VPN Connection Status. Establishing a VPN Connection When a VPN connection is established, the connection status changes to Connected (Established). Depending on the Windows setting, when the status of the Virtual Network Adapter changes from the network cable being unplug0.29147922196815254-docs/1-manual/4/4.52572013-03-03T10:07:41Z2013-03-03T10:07:41Zhttp://www.softether.org/4-docs/1-manual/7/7.6This section describes how to uninstall SoftEther VPN Server from your system if you should no longer need this program.   7.6.1 Uninstallation in Windows You can uninstall the Windows version of VPN Server in the same way as uninstalling other application software, by clicking [Control Panel] > [Add or Remove Programs] and then removing the program. Add or Remove Programs Window.   To prevent the loss of configuration data created after VPN Server is installed and written log files, this data is not automatically deleted. These files remain in the VPN Server installation directory. If VPN Server is installed to the same directory thereafter, the system uses the configuration file (vpn_server.config) remaining after the previous uninstallation, so caution must be exercised. You can use Explorer to delete these remaining data files. Remaining Configuration Files and Log Files. 7.6.2 Uninstallation in Linux To uninstall the Linux version of VPN Server when vpnserver0.291237929242114-docs/1-manual/7/7.62812013-06-04T12:59:32Z2013-06-04T12:59:32Zhttp://www.softether.org/4-docs/1-manual/6/6.3This section describes the commands for configuring and managing the entire VPN Server from among the commands that can be called when using vpncmd in VPN Server or VPN Bridge management mode. For information about the commands for configuring and managing a Virtual Hub selected with the Hub command, please refer to 6.4 VPN Server / VPN Bridge Management Command Reference (For Virtual Hub). 6.3.1 "About": Display the version information Command Name About Purpose Display the version information Description This displays the version information of this command line management utility. Included in the version information are the vpncmd version number, build number and build information. Command-line About Arguments for "About": No arguments are required.   6.3.2 "ServerInfoGet": Get server information Command Name ServerInfoGet Purpose Get server information Description 0.280056211664144584-docs/1-manual/6/6.33542024-01-20T03:44:52Z2024-01-20T03:44:52Zhttp://www.softether.org/4-docs/1-manual/5/5.3SoftEther VPN Bridge is a software product for creating a connection (bridge) between a Virtual Hub at a remote location and a physical network adapter, minus some of the functions of SoftEther VPN Server. With the exception of the differences noted here, the descriptions of SoftEther VPN Server in 3. SoftEther VPN Server Manual can be used to understand the use, principles of operation, and management of SoftEther VPN Bridge. For the detailed setup method of SoftEther VPN Bridge, refer to this chapter while replacing all descriptions of VPN Server with VPN Bridge and sevpnserver with sevpnbridge.   5.3.1 Features and Usage of VPN Bridge VPN Server and VPN Bridge SoftEther VPN Server described in 3. SoftEther VPN Server Manual is a software product that provides VPN server functions to the VPN client computer. This software allows you to place several Virtual Hubs on a single VPN Server so VPN Client or VPN Bridge can establish a VPN connection to a Virtual Hub over the network from a remote l0.27952691649114564-docs/1-manual/5/5.32682019-12-19T09:16:42Z2019-12-19T09:16:42Zhttp://www.softether.org/4-docs/3-kb/VPNFAQ002Question My company provides remote access VPN to employees using SoftEther VPN Server. If the computer on which VPN Server is running fails and no longer works, I want to quickly switch to a spare server computer. However, if two VPN Servers with the same settings are prepared, it is inconvenient because the same settings must be applied to the secondary server each time after adding a user on the primary VPN Server. How can I easily make a spare server configuration with SoftEther VPN?   Answer   There are several ways.   The simplest method is to copy the configuration file from the primary VPN server to the secondary VPN server periodically. Configuration replication can be automated using the vpncmd command line utility. A secondary VPN server configuration file that is not in operation can be rewritten at any time, but it must be noted that it cannot be overwritten when it is in operation.   A more advanced approach is to use enterprise VM products. Examples in0.250201225593294-docs/3-kb/VPNFAQ0025222013-03-04T08:21:24Z2013-03-04T08:21:24Zhttp://www.softether.org/4-docs/1-manual/6/6.4This section describes the commands for configuring and managing a Virtual Hub selected with the Hub command from among the commands that can be called when using vpncmd in VPN Server or VPN Bridge management mode. For information about the commands for configuring and managing the entire VPN Server, please refer to 6.3 VPN Server / VPN Bridge Management Command Reference (For Entire Server). 6.4.1 "Online": Switch Virtual Hub to Online Command Name Online Purpose Switch Virtual Hub to Online Description Use this when the Virtual Hub currently being managed is offline to switch it to online. A Virtual Hub with an offline status cannot receive VPN connections from clients. By switching the Virtual Hub to online, that Virtual Hub becomes able to receive connections from users and provide services. This command cannot be run on VPN Bridge. You cannot execute this command for Virtual Hubs of VPN Servers operating as a cluster. Command-line Online 0.2335428298985201934-docs/1-manual/6/6.43552013-07-09T14:45:59Z2013-07-09T14:45:59Zhttp://www.softether.org/4-docs/2-howto/6.VPN_Server_Behind_NAT_or_Firewall/2.VPN_AzureIf the corporate firewall is more restricted and the NAT Traversal of SoftEther VPN doesn't work correctly, instead use VPN Azure to penetrate such a firewall. VPN Azure Relay Service NAT Traversal works with most of NATs and Firewalls, however, some restricted firewalls cannot pass NAT Traversal packets. In such a case do not give up. You can activate VPN Azure Relay Service on SoftEther VPN. After that, all VPN connecting requests from VPN Client or VPN Bridge will be relayed through the VPN Azure Cloud Servers operated by SoftEther VPN Project for free of charge. VPN Azure is the ultimate methods to penetrate any kinds of firewalls. The principle of VPN Azure is very simple. SoftEther VPN Server behind the firewall always keep a TCP-based connection toward a VPN Azure relay server. It is permitted automatically by the firewall because the direction of the initial connection is "from inside to outside" . The firewall treats such packets as trusted. VPN Client or VPN Bridge requests the approp0.233105524402364-docs/2-howto/6.VPN_Server_Behind_NAT_or_Firewall/2.VPN_Azure4852019-07-30T08:58:13Z2019-07-30T08:58:13Zhttp://www.softether.org/9-about/News/900-SEVPN201901Published: 2019/07/09 Related: CVE-2019-11868   SoftEther VPN Security Advisory articles are published for high impact vulnerabilities (an arbitrary code execution or equivalent). Summary A vulnerability in the NDIS 5.x based Local Bridge module for SoftEther VPN 4.29 Build 9680 or older could allow the local Windows-logged-on attacker (who is already logged on to the same computer which run VPN servers) to realize a Windows local authenticated privilege escalation attacks or could result in BSODs. To exploit this vulnerability, an attacker must log on to the local Windows system which is the same computer which running the SoftEther VPN Server. An attacker could then run a specially crafted program that could exploit the vulnerability. This vulnerability affects only when the server computer is running the Local Bridge function or the SecureNAT function on Windows 2000, Windows XP, Windows Vista, Windows 7 and Windows 8.0 (not Windows 8.1). Same Windows Server family of these Wi0.202377959536709-about/News/900-SEVPN2019015202013-07-09T13:07:29Z2013-07-09T13:07:29Zhttp://www.softether.org/4-docs/2-howto/5.VPN_for_Home SoftEther VPN is also convenient for home users. You can be proud of using enterprise-class VPN for your home-use. Remote Access Access to your home server or digital appliance from outside? Set up SoftEther VPN Server on your home PC and gain access to your server or HDTV recorder from anywhere even the opposite side of the earth, through the Internet. Comfortable Network Anywhere Are you a business man and running around the world? Most of Wi-Fi and local ISPs of several countries are discomfort to use because of packet filtering or censorship. So set up your private relay server on your home PC and use it from fields to gain ease. 0.195689521961154-docs/2-howto/5.VPN_for_Home4712024-02-16T11:27:51Z2024-02-16T11:27:51Zhttp://www.softether.org/4-docs/2-howto/1.VPN_for_On-premise/1.Ad-hoc_VPNMake an ad-hoc VPN consists of the small-number computers with SoftEther VPN. Despite the long-distance, it is easy to communicate mutually with any kinds of LAN-oriented protocols.   Principles SoftEther VPN can construct distributed virtual Ethernet segment. If you can make some geologically distributed computers enable to communicate each other as if they are connected to the single Ethernet network, using SoftEther VPN is the easiest way. First, set up a VPN Server. Next, set up VPN Clients on each member PCs. Finally start VPN connections on each VPN client. Then each clients can use any kinds of IP-based or Ethernet-based protocols via the VPN even if they are distributed around the world.   Step 1. Set up SoftEther VPN Server Designate a computer in the group as the VPN Server. Set up SoftEther VPN Server on that computer. It is very easy by using Installer and Initial Setup Wizard based GUI. Step 2. Create Users On the VPN Server you can add several user objec0.186835585154854-docs/2-howto/1.VPN_for_On-premise/1.Ad-hoc_VPN4332013-03-05T17:47:48Z2013-03-05T17:47:48Zhttp://www.softether.org/1-features/1._Ultimate_Powerful_VPN_Connectivity1.1. Firewall, Proxy and NAT Transparency One of the key features of SoftEther VPN is the transparency for firewalls, proxy servers and NATs (Network Address Translators). NATs are sometimes implemented on broadband router products.   Only HTTP/HTTPS traffics can pass through the restricted firewall. SoftEther VPN is based on HTTPS. Backgrounds Generally, in company networks of nowadays, there are firewalls to isolate between the inside network and outside for ensuring security. Not only for purpose of security, but also companies use firewalls, proxies and NATs in order to share the precious IP addresses with many computer users in the office. So such devices are indispensable today. Tunnels of legacy VPN protocols, such as IPsec, L2TP and PPTP, cannot often be established through firewalls, proxy servers and NATs. There protocols were developed in the era before NATs were widely spread. For example, IPsec and L2TP use ESP (Encapsulating Security Payload) packets, and PPTP uses GRE0.18332313028332391-features/1._Ultimate_Powerful_VPN_Connectivity892013-07-09T13:07:07Z2013-07-09T13:07:07Zhttp://www.softether.org/4-docs/2-howto/3.VPN_for_Mobile SoftEther VPN supports several mobile devices including iPhone and Android. Your smartphone is now a part of your on-premise or Cloud network by using SoftEther VPN. iPhone and Android iPhone and Android has a built-in VPN client but originally they need Cisco, Juniper or other expensive hardware-based VPNs for remote-access. SoftEther VPN has a same function to Cisco, and supports iPhone and Android easily. Windows and Mac Laptops Your mobile PCs with Windows or Mac can easily connect to SoftEther VPN anywhere and anytime, despite firewalls or packet filters on Wi-Fi or overseas ISP. Windows RT is also supported. 0.181829522081044-docs/2-howto/3.VPN_for_Mobile4572013-07-09T13:06:58Z2013-07-09T13:06:58Zhttp://www.softether.org/4-docs/2-howto/2.VPN_for_Cloud SoftEther VPN can build-up flexible and dependable virtual network around Clouds. Amazon EC2, Windows Azure and most of other Clouds are supporting SoftEther VPN. Join a Local PC into Cloud Your desktop or laptop PC can join into the Cloud VM network. You can make use of Cloud VM as if it is on your local network easily. Join a Cloud VM into LAN Your Cloud VM can join to your company LAN with SoftEther VPN. Anyone on your company can access to the Cloud VM without any settings. Cloud to LAN Bridge VPN SoftEther VPN keeps a virtual dedicate Ethernet line from the Cloud to the LAN 24h/365d. You can consider remote Cloud private network as a part of your corporate network. Cloud to Cloud Bridge VPN Using Amazon EC2 and Windows Azure, or using two or more remote datacenters of a Cloud service? SoftEther VPN can make a single united network between all Cloud VMs despite differences of physical locations. 0.181578337101644-docs/2-howto/2.VPN_for_Cloud4392013-07-09T13:08:24Z2013-07-09T13:08:24Zhttp://www.softether.org/4-docs/2-howto/7.Replacements_of_Legacy_VPNs IPsec-based VPN protocols which are developed on 1990's are now obsoleted. IPsec-based VPN are not familiar with most of firewalls, NATs or proxies. Unlike IPsec-based VPN, SoftEther VPN is familiar with any kind of firewalls. Additionally SoftEther VPN requires no expensive Cisco or other hardware devices. You can replace your Cisco or OpenVPN to SoftEther VPN today. Penetrates Firewall by SSL-VPN Troubling with IPsec-based legacy VPN products? Replace it to SoftEther VPN. SoftEther VPN Protocol is based on HTTPS so almost all kinds of firewalls permits SoftEther VPN's packets. Replacements of Cisco or other hardware-based VPNs Cisco, Juniper or other hardware-based IPsec VPNs are expensive for set-up and management. They are also lack of usability and compatibility with Firewalls. Replacement of them to SoftEther VPN is very easy because SoftEther VPN also has the L2TP/IPsec VPN function which is same to Cisco's. Replacements of OpenVPN Are you still using OpenVP0.179022935202004-docs/2-howto/7.Replacements_of_Legacy_VPNs4922013-07-09T13:06:17Z2013-07-09T13:06:17Zhttp://www.softether.org/4-docs/2-howto/4.VPN_for_IT_Professionals SoftEther VPN is also an ultra-convenient tool for effective system management by IT professionals on enterprises and system integrators. Remote Management A lot of servers, clients and printers of your client companies are distributed around the state? SoftEther VPN helps a network administrator as a handy tool. Just from your desk, you can reach to any networks which you have installed SoftEther VPN in advance. Building Your Own Cloud You want to build and provide your own Cloud service which can beat Amazon EC2 or Windows Azure? SoftEther VPN helps you to build an inter-VMs network and remote-bridging network between your Cloud and your customer's on-premise.   VPN for Network Testing, Simulation and Debugging SoftEther VPN is not a program only for building remote network. It can be used for network design, test, and simulation by IT professionals. For example, delay, jitter and packet loss generator is implemented on SoftEther VPN so network designer can t0.176837532471684-docs/2-howto/4.VPN_for_IT_Professionals4632013-07-09T13:06:48Z2013-07-09T13:06:48Zhttp://www.softether.org/4-docs/2-howto/1.VPN_for_On-premise SoftEther VPN is an essential infrastructure to build-up IT systems on enterprises and small-businesses. Ad-hoc VPN Make an ad-hoc VPN consists of the small-number computers with SoftEther VPN. Despite long-distance, it is easy to communicate mutually with any kinds of LAN-oriented protocols. LAN to LAN Bridge Geologically distributed branches are isolated as networks by default. SoftEther VPN lays virtual Ethernet cables between your all branches. Then all computers of all branches are connected to the single LAN.   Remote Access to LAN Employees need to connect to the company LAN from outside or home? Remote Access VPN realizes virtual network cable from a Client PC to the LAN from anywhere and anytime. 0.173773832531184-docs/2-howto/1.VPN_for_On-premise4312024-02-22T07:28:03Z2024-02-22T07:28:03Zhttp://www.softether.org/4-docs/2-howto/2.VPN_for_Cloud/4.Cloud_to_Cloud_Bridge_VPNUsing Amazon EC2 and Windows Azure, or using two or more remote datacenters of a Cloud service? SoftEther VPN can make a single united network between all Cloud VMs despite differences of physical locations. Principles If you are using two or more Cloud Services, you might have a demand to bind all cloud VMs into a single network. SoftEther VPN can realize the single Ethernet segment between different Cloud Provides and different data-center locations. After you build the single virtual network between Cloud VMs which are geologically isolated, each Cloud VMs can now communicate to each other. Therefore you can design and implement flexible private networks across several Clouds by using SoftEther VPN. Method 1. Single VPN Server for All Cloud VMs Easiest method to bind all Cloud VMs is to build-up a VPN which are joined from all Cloud VMs. This method is similar to Ad-hoc VPN at On-premise environment. You can set up a VPN Server on a Cloud VM. After that, you can install VPN Client on al0.169097267306214-docs/2-howto/2.VPN_for_Cloud/4.Cloud_to_Cloud_Bridge_VPN4552024-02-27T03:38:25Z2024-02-27T03:38:25Zhttp://www.softether.org/4-docs/2-howto/7.Replacements_of_Legacy_VPNs/1.Penetrates_Firewall_by_SSL-VPNTroubling with IPsec-based legacy VPN products? Replace it to SoftEther VPN. SoftEther VPN Protocol is based on HTTPS so almost all kinds of firewalls permits SoftEther VPN's packets. SoftEther VPN can be used anywhere You might have an experience that you cannot use IPsec-based legacy VPN protocols from a hotel room or Wi-Fi. The reason is simple. The firewalls of public networks often filters IPsec VPN protocols. Unlike legacy VPNs, SoftEther VPN is based on SSL-VPN. It is technically HTTPS (HTTP over SSL). HTTPS can pass any kinds of firewalls which disallow IPsec-based VPNs.   See Also  1. Ultimate Powerful VPN Connectivity  1.4 VPN Processing Principle and Communication Method 0.165563223171154-docs/2-howto/7.Replacements_of_Legacy_VPNs/1.Penetrates_Firewall_by_SSL-VPN4942024-02-21T10:29:32Z2024-02-21T10:29:32Zhttp://www.softether.org/4-docs/2-howto/2.VPN_for_Cloud/3.Cloud_to_LAN_Bridge_VPNSoftEther VPN keeps a virtual dedicate Ethernet line from the Cloud to the LAN 24h/365d. You can consider remote Cloud private network as a part of your corporate network.   Principles If you are using a lot of Cloud VMs, and operating private networks between Cloud VMs, SoftEther VPN can make a bridge between a Cloud-based private network and your corporate network. It means that you can build a virtual dedicated Ethernet line between your company and using Cloud Provider's network. After you build a VPN bridging between Cloud network and On-premise network, your Cloud network will be a part of your on-premise network. Then any computers on both cloud and on-premise can now access to any other computers beyond the differences and distances between corporate office and Cloud Service Providers. Step 1. Set up SoftEther VPN Server on a Side At first you must set up SoftEther VPN Server on either Cloud-side or On-premise side. It is depends on your strategy. If you might move to anothe0.159554182565064-docs/2-howto/2.VPN_for_Cloud/3.Cloud_to_LAN_Bridge_VPN4532025-06-24T13:49:25Z2025-06-24T13:49:25Zhttp://www.softether.org/4-docs/1-manual/2/2.3This section contains a description of the method of authenticating VPN client computers that connect to the SoftEther VPN Server in the previous item 2.2 User Authentication. Server authentication is oppositely the function whereby the VPN Server verifies that the VPN client computer (VPN client or VPN Server / VPN Bridge that conducts cascade connection) that attempts to connect to the SoftEther VPN Server is authentic. Normaly this function is off by default. Although server authentication is not needed for conventional operation, it can be enabled for each client connection setting or cascade connection setting. 2.3.1 Necessity of Server Authentication Concerning Man in the Middle Attack in Internet of Public IP Network Server authentication is needed when verifying whether the connection destination VPN Server when connecting to insecure VPN using public network is authentic. By planting special software that rewrites protocol in the line of an IP network, a malicious third party can technica0.1585833102158954-docs/1-manual/2/2.31632013-03-05T04:18:56Z2013-03-05T04:18:56Zhttp://www.softether.org/4-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/6.Cisco_IOS_L2TPv3%2F%2F%2F%2FIPsec_Edge-VPN_Router_SetupMost of Cisco's routers which are released on or after 2005 has L2TPv3 over IPsec protocol function. (If not, you might be able to upgrade the IOS version to support it.) If you use L2TPv3 over IPsec, you can establish an IPsec-encrypted tunnel between the remote site's Cisco Router and the central site's SoftEther VPN Server. This web page explains how to setup a Cisco 1812 or Cisco 892 router to connect the SoftEther VPN Server.   Why Cisco Routers with SoftEther VPN Server is the Best? The above link shows the advantage of SoftEther VPN Server with the combination with Cisco Routers.   Cisco's Routers Preparation Before setup Cisco router you have to setup the SoftEther VPN Server settings.   On the above screen, check the "Enable EtherIP / L2TPv3 over IPsec Server Function" and click the "Detail Settings" button. The following screen will appear.   In this screen you have to define a mapping-table between L2TPv3 client (router)'s ISAKMP (IKE0.15508641173611424-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/6.Cisco_IOS_L2TPv3////IPsec_Edge-VPN_Router_Setup3782019-02-28T01:58:59Z2019-02-28T01:58:59Zhttp://www.softether.org/1-features/2._Layer-2_Ethernet-based_VPN2.1. Full Ethernet Virtualization The key concept of the method of realizing VPN by SoftEther VPN is the full virtualization of Ethernet segments, layer-2 Ethernet switches and Ethernet adapters. In order to establish good VPN network, SoftEther VPN virtualizes Ethernet, which is widely used all over the World. To understand the advantage of SoftEther VPN, please read the basis knowledge about Ethernet and it's limitation at first. And you will understand how SoftEther VPN resolves it in order to establish private communications between remote sites.   SoftEther VPN encapsulates Ethernet over HTTPS to transmit frames over Internet. Ethernet is the Standard of LAN As you know, Ethernet is a technology for using on LANs (Local Area Networks). Ethernet is very convenient and reliable standard in order to connect several computers together. With Ethernet, you can enjoy many network programs such as file sharing, printer sharing and accessing amounts of data on RDBMS (Relational Database0.14812473536541851-features/2._Layer-2_Ethernet-based_VPN902013-03-05T05:08:36Z2013-03-05T05:08:36Zhttp://www.softether.org/4-docs/9-research/Design_and_Implementation_of_SoftEther_VPN"Design and Implementation of SoftEther VPN" is Daiyuu Nobori's Master Thesis, presented at January 16, 2013. Slide Show PPT PDF (English) Download the PDF file of the slide-show. Master Thesis Text PDF (Japanese) This is the main contents of my Master Thesis of SoftEther VPN. Outline of Master Thesis   0.144938412115514-docs/9-research/Design_and_Implementation_of_SoftEther_VPN3862013-07-09T14:08:19Z2013-07-09T14:08:19Zhttp://www.softether.org/4-docs/2-howto/4.VPN_for_IT_Professionals/2.VPN_for_Network_Testing%2C_Simulation_and_DebuggingSoftEther VPN is not a program only for building remote network. It can be used for network design, test, and simulation by IT professionals. For example, delay, jitter and packet loss generator is implemented on SoftEther VPN so network designer can test VoIP phones under the bad-condition IP network. Delay, Jitter and Packet Loss Generator for VoIP Testing SoftEther VPN Server can be used for non-VPN purpose. By using SoftEther VPN Server you can use the Delay, Jitter and Packet Loss Generator to simulate a bad-condition network. You can define two Local Bridges from a Virtual Hub toward two physical Ethernet network adapter. Then both two Ethernet network segments are bridged through the Virtual Hub, and the Virtual Hub inserts delay, jitter and packet loss while forwarding Ethernet frames. The Delay, Jitter and Packet Loss Generator is very helpful to test VoIP devices. Make a Test Ethernet Segment In order to test your Ethernet-based network topology you can utilize SoftEther VPN Se0.142911126532294-docs/2-howto/4.VPN_for_IT_Professionals/2.VPN_for_Network_Testing,_Simulation_and_Debugging4672024-02-27T09:23:52Z2024-02-27T09:23:52Zhttp://www.softether.org/4-docs/2-howto/7.Replacements_of_Legacy_VPNs/3.Replacements_of_Cisco_or_other_hardware-based_VPNsCisco, Juniper or other hardware-based IPsec VPNs are expensive for set-up and management. They are also lack of usability and compatibility with Firewalls. Replacement of them to SoftEther VPN is very easy because SoftEther VPN also has the L2TP/IPsec VPN function which is same to Cisco's.   See Also  2.2 User Authentication  2.5 VPN Client Manager  3.7.5 Virtual DHCP Server  7.2 Install on Windows and Initial Configurations  7.4 Initial Configurations  8.2 Install on Windows and Initial Configurations  9.4 Initial Configurations  10.3 Build a PC-to-PC VPN  10.5 Build a LAN-to-LAN VPN (Using L2 Bridge) 0.13258528771104-docs/2-howto/7.Replacements_of_Legacy_VPNs/3.Replacements_of_Cisco_or_other_hardware-based_VPNs4982024-01-18T09:40:17Z2024-01-18T09:40:17Zhttp://www.softether.org/4-docs/1-manual/3/3.7The SoftEther VPN Server and SoftEther VPN Bridge Virtual Hubs feature SecureNAT functionality. This section will explain SecureNAT concepts, methods for setting them and precautions.   3.7.1 What is SecureNAT? SecureNAT Overview The SecureNAT function is a hitherto unknown innovative proprietary technology developed for the SoftEther VPN, the use of which enables the creation of a more secure network. The SecureNAT function is broadly divided into two parts: the virtual NAT function and the virtual DHCP server function. The Virtual Hub Administrator can enable either or both the virtual NAT and virtual DHCP server when SecureNAT is enabled. Please refer to 10.11 Exploit SecureNAT for Remote Access into Firewall without Any Permission for details on how to set up the SecureNAT function. The SecureNAT function is oriented towards System Administrators and those with a detailed knowledge of networks. Proper use of the SecureNAT function enables the realization of safe remote0.12152464571945534-docs/1-manual/3/3.72462014-01-06T11:29:15Z2014-01-06T11:29:15Zhttp://www.softether.org/9-about/News/800-open-sourceJanuary 4, 2014 By Daiyuu Nobori, SoftEther VPN Project at University of Tsukuba, Japan.     We are very happy to announce that the source code of SoftEther VPN is released as open-source software under the GPLv2 license. SoftEther VPN is the underlying VPN engine of VPN Gate. The source code is provided as packages in .tar.gz and .zip formats, and is also published on our GitHub repository. You can build the full SoftEther VPN programs from the source code in Windows, Linux, Mac OS X, FreeBSD or Solaris computers. You can also generate your own customized installer packages of SoftEther VPN automatically from the source code. Download the Source Code   SoftEther VPN is a product-class VPN software suite with popularity as a tool to build on-premise or cloud-base VPNs. The binaries of SoftEther VPN were released on March 8, 2013. Since then, SoftEther VPN Server has been installed into over 80,000+ server computers in Japan, United States, China, Taiwan, Iran, Germany, United0.1149782139216529-about/News/800-open-source5072020-01-14T19:02:55Z2020-01-14T19:02:55Zhttp://www.softether.org/9-aboutThe purpose of SoftEther Project is to distribute SoftEther VPN, to conduct development of SoftEther VPN continuously, to promote academic researches around SoftEther VPN, and to support users of SoftEther VPN on the forum. The project is at University of Tsukuba, Japan, and constituted by research members of the University. The current version of SoftEther VPN was Daiyuu Nobori's personal research work for obtaining Master Degree at University of Tsukuba. After the initial development has been completed he decided to release the work as freeware at this softether.org web site on March 8, 2013. See also What is different between SoftEther VPN and VPN Gate? Members SoftEther Project consists of the following members who are in University of Tsukuba. Daiyuu Nobori, Ph.D. Tetsuo Sugiyama, Ph.D. Genya Hatakeyama Christopher Smith The Inception of SoftEther VPN Daiyuu Nobori was a user of PPTP (Point-to-Point Tunneling Protocol) with Windows Server Routing an0.1026393119348979-about1122013-03-02T12:29:40Z2013-03-02T12:29:40Zhttp://www.softether.org/4-docs/1-manualWelcome to SoftEther VPN Official Manual. This is the technical reference which describes most part of all functions of SoftEther VPN. You should read Why SoftEther VPN? before reading this manual.   0. Introduction 0.1 Welcome to SoftEther VPN 0.2 Before Reading the Manual 1. SoftEther VPN Overview 1.1 What is SoftEther VPN? 1.2 SoftEther VPN Components 1.3 SoftEther VPN is Freeware 1.4 VPN Processing Principle and Communication Method 1.5 Strong Security Features 1.6 VPN Communication Details 1.7 Large Load VPN by Clustering 1.8 Multilanguage Support 1.9 VoIP / QoS Support Function 2. SoftEther VPN Essential Architecture 2.1 VPN Communication Protocol 2.2 User Authentication 2.3 Server Authentication 2.4 VPN Server Manager 2.5 VPN Client Manager 2.6 VPN Command Line Management Utility (vpncmd) 3. SoftEther VPN Server Manual 3.1 Operating System Requirements 3.2 Operating Modes 3.3 VPN Server Administration 3.4 Virtual Hub Functions 3.5 Virtual Hub Security Features 3.6 Loca0.1008071236565354-docs/1-manual1172025-04-16T07:52:55Z2025-04-16T07:52:55Zhttp://www.softether.org/ SoftEther VPN Project develops and distributes SoftEther VPN, An Open-Source Free ​Cross-platform Multi-protocol VPN Program, as an academic project from University of Tsukuba, under the Apache License 2.0. Click here for software update history and to download the latest version SoftEther VPN 4.44 Build 9807 RTM (April 16, 2025) We have resolved several software bugs. Additionally, we officially released a protection feature against TunnelCrack to strengthen security. TunnelCrack protection implemented in SoftEther VPN Client (August 31, 2023) SoftEther VPN 4.42 Build 9798 RTM (June 30, 2023) As a result of a high-level code review and technical cooperation by Cisco Systems, Inc. of the United States, six vulnerabilities, including CVE-2023-27395, have been fixed. The risk of exploitation of any of the fixed vulnerabilities is relatively low under normal usage and environment, and actual attacks are not easy to conduct, We recommend that you update your software as much as possi0.09962177475682589222017-10-19T06:51:28Z2017-10-19T06:51:28Zhttp://www.softether.org/1-features  SoftEther VPN is one of the most powerful and easiest VPN software in the world. It is freeware, developed as an academic research project in University of Tsukuba, Japan. Download SoftEther VPN and enjoy it today. It is open source. Walkthrough Read the walkthrough to grasp the key features and advantages of SoftEther rapidly. 1. Ultimate Powerful VPN Connectivity 2. Layer-2 Ethernet-based VPN 3. Security and Reliability 4. Fast Throughput and High Ability 5. Easy Installation and Management Features Free and open-source software. Easy to establish both remote-access and site-to-site VPN. SSL-VPN Tunneling on HTTPS to pass through NATs and firewalls. Revolutionary VPN over ICMP and VPN over DNS features. Resistance to highly-restricted firewall. Ethernet-bridging (L2) and IP-routing (L3) over VPN. Embedded dynamic-DNS and NAT-traversal so that no static nor fixed IP address is required. AES 256-bit and RSA 4096-bit encrypti0.0979773940318761-features812013-03-06T06:39:07Z2013-03-06T06:39:07Zhttp://www.softether.org/3-screens/2.vpnclient  SoftEther VPN Client Manager Main Window   Create New Virtual Network Adapter   Virtual Network Adapter IP Address Assignment Notice   Add a lot of Virtual Network Adapter on a Windows PC   VPN Connecting Status Screen   VPN Connection Error Screen   Password Retry Dialog   VPN Client Manager Icon and Menu in Windows Task Tray   Virtual Network Adapter IP Address Setting Screen   Virtual Network Adapter MAC Address Settign Screen   Bridge between Virtual Network Adapter and Physical Network Adapter   VPN Connection Advanced Settings   Establishing VPN via Proxy Server or SOCKS Server   VPN Session Status Dialog   Network Traffic Speed Test Tool   Results of Network Traffic Test Tool   VPN Client Manager Easy Mode Window (Optional)     More Screenshots of SoftEther VPN Software 0.096450862391133-screens/2.vpnclient3932024-01-17T10:21:14Z2024-01-17T10:21:14Zhttp://www.softether.org/4-docs/1-manual/1/1.6This section contains a brief description of basic concept of various matters involving VPN communication using SoftEther VPN and a description of important things to know when constructing VPN by SoftEther VPN. 1.6.1 VPN Sessions With SoftEther VPN, VPN communication starts when the VPN connection source computer connects to the VPN Server by VPN. This unit of VPN communication is referred to as a "VPN session". In 1.4 VPN Processing Principle and Communication Method, it was explained that along with emulating a conventional Ethernet switching hub, SoftEther VPN can be a accept connection from a VPN connection source just as a physical connection point of a conventional switching hub. Physical network adapters and switching hubs are connected to each other by network cable. But SoftEther VPN are being ready just in case, when a Virtual Network Adapter or Virtual Hub of another computer is connected to a Virtual Hub, the communication contentions are tunneled and flow through a physical netwo0.092656373166132334-docs/1-manual/1/1.61482014-01-15T02:37:49Z2014-01-15T02:37:49Zhttp://www.softether.org/4-docs/1-manual/0/1Welcome to SoftEther VPN. SoftEther VPN is the latest release of next-generation VPN communications software provided by SoftEther VPN Project that offers stability, flexibility and expandability. SoftEther VPN enables the user to safely create a high-performance Virtual Private Network (VPN) using an IP communications network, of which the Internet is the representative example. VPN technology can be taken maximum advantage of in fields ranging from communication for business applications to networks oriented toward individual and home use. Please read the SoftEther VPN official manual to use the SoftEther VPN to its full potential for VPN communications. 0.09233394852984-docs/1-manual/0/11322014-01-15T03:17:25Z2014-01-15T03:17:25Zhttp://www.softether.org/4-docs/1-manual/1SoftEther VPN is revolutionary VPN software that offers many features does not found in older VPN software or hardware. This chapter contains an overview of the software contained in SoftEther VPN, plus a description of its functions and supplementary information. 1.1 What is SoftEther VPN? 1.2 SoftEther VPN Components 1.3 SoftEther VPN is Open Source 1.4 VPN Processing Principle and Communication Method 1.5 Strong Security Features 1.6 VPN Communication Details 1.7 Large Load VPN by Clustering 1.8 Multilanguage Support 1.9 VoIP / QoS Support Function 0.092333942437934-docs/1-manual/11362024-01-20T14:58:55Z2024-01-20T14:58:55Zhttp://www.softether.org/4-docs/1-manual/A/10.1  The VPN topologies you can set up with SoftEther VPN can be divided into three types: a PC-to-PC VPN, a Remote Access VPN, and a LAN-to-LAN VPN. In this section you will learn about each of these types. Most VPNs will utilize one or a combination of these three types. However, these three are not the only possible network configurations you can build with SoftEther VPN. First of all, let's look at some more details about these three major topologies.   10.1.1 PC-to-PC VPN This is the simplest network topology to construct using SoftEther VPN. A PC-to-PC VPN is most useful under the following conditions: Only one to a few dozen computers will connect to the VPN. VPN Client can be installed on each of the client computers. The VPN network does not need to be able to connect to a physical LAN. (When you want the entire network to be the VPN only.) In order to connect to the VPN using this method you must install VPN Client on each client computer. VPN Client will then 0.092141588248634-docs/1-manual/A/10.13282013-03-06T06:35:51Z2013-03-06T06:35:51Zhttp://www.softether.org/3-screens/3.installer  SoftEther VPN Setup Wizard: Welcome Page   Specify the Destination Directory   End-user License Agreement Screen   User Mode Install Option (You need no Administrator's Password. Awesome ! )   Language Selection   Select a Component to Install   Progress of Install Tasks     More Screenshots of SoftEther VPN Software 0.091460372540433-screens/3.installer3962024-01-17T10:24:59Z2024-01-17T10:24:59Zhttp://www.softether.org/4-docs/1-manual/2/2.1The protocol used by SoftEther VPN for VPN communications are version 3 of the global security standard Secure Socket Layer (SSL). SoftEther VPN includes several technical innovations to increase speed and enhance security of VPN communications. This section provides a detailed description of SoftEther VPN protocol. For more information on SoftEther VPN protocol, see 1.6 VPN Communication Details. 2.1.1 Communication Speed SoftEther VPN is a VPN system that consists of exchanging virtual Ethernet frames and communicate by VPN among VPN Client / VPN Server / VPN Bridge. Based on TCP/IP protocol, SoftEther VPN protocol plays the role of encapsulating, encrypting and transmitting virtual Ethernet frames on a physical IP network. Normally there is a problem that the drawback of communication that do not have much high efficiency in protocol based on conventional TCP/IP. This is because of the protocol itself conducts retransmission control and flow control, in some cases TCP/IP can only be used fo0.090984432160122704-docs/1-manual/2/2.11592013-03-01T19:20:30Z2013-03-01T19:20:30Zhttp://www.softether.org/4-docs/1-manual/2To understand all the functions of SoftEther VPN, you must first get an understanding of the parts shared by SoftEther VPN in its entirety. Matters in common to SoftEther VPN are covered in detail in this chapter. 2.1 VPN Communication Protocol 2.2 User Authentication 2.3 Server Authentication 2.4 VPN Server Manager 2.5 VPN Client Manager 2.6 VPN Command Line Management Utility (vpncmd) 0.090884961684684-docs/1-manual/21572013-03-02T08:47:04Z2013-03-02T08:47:04Zhttp://www.softether.org/4-docs/1-manual/5SoftEther VPN Bridge is software that allows you to cascade-connect to a Virtual Hub of SoftEther VPN Server operating at a remote location and create a Layer-2 bridge connection between that VPN connection and a physical network adapter on a computer running SoftEther VPN Bridge. SoftEther VPN Bridge is the ideal software for a computer connected to a remote base LAN when you want to connect the remote base LAN to a VPN configured with SoftEther VPN Server (namely, a Virtual Hub on a SoftEther VPN Server). This chapter describes the functions of SoftEther VPN Bridge and how to use the functions. SoftEther VPN Client is provided as a free software product. To use all of the functions at no cost, you must agree to the end-user license agreement. 5.1 Operating System Requirements 5.2 Operating Modes 5.3 Differences between VPN Server and VPN Bridge 0.089671116571504-docs/1-manual/52652024-01-17T09:58:03Z2024-01-17T09:58:03Zhttp://www.softether.org/4-docs/1-manual/1/1.2SoftEther VPN is composed of VPN Server, VPN Client, VPN Bridge and several common software components. When using SoftEther VPN, depending on what software is installed on your computer, it is necessary to understand VPN construction and whether or not it can be operated. A list of software and a description of the functions and roles are provided here. 1.2.1 SoftEther VPN Server Role of SoftEther VPN Server SoftEther VPN Server is the most important software for the SoftEther VPN system. Just as the name suggests, SoftEther VPN Server plays the role of VPN server to accept connections from remotely located VPN Client and VPN Bridge through the network. Installation of SoftEther VPN Server is necessary no matter what form VPN is realized. The reason for this is because only SoftEther VPN Server accept connection from VPN Client and VPN Bridge. Multiple Virtual Hubs can be created for SoftEther VPN Server and Ethernet frames which can be exchanged within Virtual Hub. For more information o0.089576712116216284-docs/1-manual/1/1.21402013-03-02T08:04:06Z2013-03-02T08:04:06Zhttp://www.softether.org/4-docs/1-manual/4SoftEther VPN Client is VPN client software with a Virtual Network Adapter function that enables connection to a Virtual Hub on SoftEther VPN Server operated at a remote location. The user can use the easy settings on a computer with SoftEther VPN Client installed to connect to a Virtual Hub on SoftEther VPN Server and flexibly connect via a Virtual Network Adapter. This chapter describes the functions of SoftEther VPN Client and how to use the functions. SoftEther VPN Client is provided as a free software product. To use all of the functions at no cost, you must agree to the end-user license agreement. 4.1 Operating System Requirements 4.2 Using the VPN Client 4.3 Virtual Network Adapter 4.4 Making Connection to VPN Server 4.5 Connect to VPN Server 4.6 Using and Managing Smart Cards 4.7 Enterprise-class Management of VPN Client 4.8 Measuring Effective Throughput 4.9 Other Functions 0.089502927701584-docs/1-manual/42512024-01-17T09:12:07Z2024-01-17T09:12:07Zhttp://www.softether.org/4-docs/1-manual/9This chapter describes the detailed procedure for installing SoftEther VPN Bridge to a Windows- or Linux-based server computer and configuring the default settings. For details on the SoftEther VPN Bridge functions, please refer to 5. SoftEther VPN Bridge Manual. 9.1 Before Install 9.2 Install on Windows and Initial Configurations 9.3 Install on Linux and Initial Configurations 9.4 Initial Configurations 9.5 Uninstall SoftEther VPN Bridge 0.08814471412704-docs/1-manual/93192024-01-18T01:11:05Z2024-01-18T01:11:05Zhttp://www.softether.org/4-docs/1-manual/2/2.5VPN Client Manager is a user interface for controlling SoftEther VPN Client installed together with SoftEther VPN Client on a Windows PC. This section contains a description of VPN Client Manager.   2.5.1 What is VPN Client Manager? VPN Client Manager is the only software directly operated by the average end user using VPN system by SoftEther VPN. VPN Client Manager enables you to control VPN Client, create new connection settings or Virtual Network Adapters and connect to SoftEther VPN Server using the connection settings. For details on VPN Client Manager and VPN Client, see 4. SoftEther VPN Client Manual. 2.5.2 System that Supports VPN Client Manager VPN Client Manager runs on all operating systems that support the Windows version of SoftEther VPN Client. For further details see Specifications. 2.5.3 Integrating with VPN Client VPN Client Manager operates in close cooperation with SoftEther VPN Client service (background service that offers VPN Client functions). VPN Clie0.0873589667055144-docs/1-manual/2/2.51672024-01-17T09:12:00Z2024-01-17T09:12:00Zhttp://www.softether.org/4-docs/1-manual/8This chapter describes the detailed procedure for installing SoftEther VPN Client to a Windows-based computer and configuring the default settings. For details on the SoftEther VPN Client functions, please refer to 4. SoftEther VPN Client Manual. 8.1 Before Install 8.2 Install on Windows and Initial Configurations 8.3 Uninstall SoftEther VPN Client 0.084981791073554-docs/1-manual/82942024-01-17T09:54:29Z2024-01-17T09:54:29Zhttp://www.softether.org/4-docs/1-manual/1/1.1SoftEther VPN is next-generation VPN software that offers stability, flexibility and expandability, and is compatible with all advanced networks that produce wide bandwidth an high load required by large corporations and Internet providers as well as networks for individuals and homes and networks for small and medium size businesses. This section contains an overview of SoftEther VPN, a comparison with older VPN protocol, and a description of its advanced functions. 1.1.1 History SoftEther VPN was previously developed and distributed as "SoftEther 1.0". SoftEther (old) was developed by Daiyuu Nobori, a student of University of Tsukuba, as a personal project. "SoftEther" was software that enabled users to construct a simple layer 2 VPN by installing a Virtual Network Adapter and Virtual Ethernet Switching Hub on Windows, and was distributed as freeware. "SoftEther" later became a project of the research and development project of Japanese Government, subsidized by Ministry of Economy, Trade and In0.084670293775836784-docs/1-manual/1/1.11382020-06-16T09:26:44Z2020-06-16T09:26:44Zhttp://www.softether.org/5-download/src/9.patchInitial Release: January 8, 2014. Amendment #1: January 15, 2014. Amendment #2: January 21, 2019. (日本語版はこちら)     This policy defines our patch acceptance policy from contributors for SoftEther VPN. Use GitHub to submit a patch Sending a patch to us is very welcome and appreciated. If you would like to send a patch for SoftEther VPN, please use the GitHub pull request function. The GitHub repository URL is: https://github.com/SoftEtherVPN/SoftEtherVPN/ We are afraid that we cannot accept patches by other methods, in order to keep the consistency of the source-code tree.   Comply to the SoftEther VPN Developers Guideline New contributions are subject to the following guidelines: https://github.com/SoftEtherVPN/SoftEtherVPN/wiki/SoftEther-VPN-Developers-Guideline   Who decides the patch to be accepted or not? The SoftEther VPN Project has the authority to decide whether or not to accept the received patch into the SoftEther VPN source code tree0.0843422758394165-download/src/9.patch5142013-06-04T13:00:07Z2013-06-04T13:00:07Zhttp://www.softether.org/4-docs/1-manual/6/6.5This section describes all commands that can be called when using vpncmd in VPN Client management mode. 6.5.1 "About": Display the version information Command Name About Purpose Display the version information Description This displays the version information of this command line management utility. Included in the version information are the vpncmd version number, build number and build information. Command-line About Arguments for "About": No arguments are required.   6.5.2 "VersionGet": Get Version Information of VPN Client Service Command Name VersionGet Purpose Get Version Information of VPN Client Service Description Use this to get the version information of the currently managed VPN Client Service program. Command-line VersionGet Arguments for "VersionGet": No arguments are required.   6.5.3 "PasswordSet": Se0.083471815252787384-docs/1-manual/6/6.53562013-07-13T07:04:51Z2013-07-13T07:04:51Zhttp://www.softether.org/4-docs/1-manual/AChapters 1 through 9 gave a general outline of SoftEther VPN and how to use it. This chapter will thoroughly explain how to actually take that information and apply it to build several different types of VPNs with SoftEther VPN. 10.1 Types of VPNs 10.2 Common Concepts and Knowledge 10.3 Build a PC-to-PC VPN 10.4 Build a PC-to-LAN Remote Access VPN 10.5 Build a LAN-to-LAN VPN (Using L2 Bridge) 10.6 Build a LAN-to-LAN VPN (Using L3 IP Routing) 10.7 Mixture of LAN-to-LAN VPN and Remote Access VPN 10.8 Build a Large Scale Remote Access VPN Service 10.9 Build a Large Scale Virtual Hub Hosting Service 10.10 Your Home PC as VPN Relay for Protect WiFi Using 10.11 Exploit SecureNAT for Remote Access into Firewall without Any Permission How to build your VPN network? The Tutorials page describes how to build some typical examples of VPN networks. 0.0831498937541674-docs/1-manual/A3262024-01-17T10:22:40Z2024-01-17T10:22:40Zhttp://www.softether.org/4-docs/1-manual/1/1.7SoftEther VPN Server supports the clustering function, which enables multiple VPN Servers to be administered as a single VPN Server and realize load balancing and fault tolerance among the various VPN Servers. For a more detailed description of the clustering functions, see 3.9 Clustering. 1.7.1 Necessity of Clustering SoftEther VPN Server is VPN server software that equips with superior performance and functions. Altough the power a single computer can exhibit by hardware resource is always limited, the throughput and number of simultaneous connections that can be supported by a single VPN Server that differs according to the hardware performance of the computer running VPN Server. No matter how much the server hardwares are optimized and speeded up, hardware performance limitations ultimately exist, and more processing cannot be executed on a single computer. Using the clustering function of SoftEther VPN Server enables you to consolidate multiple VPN Servers as a single cluster. VPN connect0.082819271256512874-docs/1-manual/1/1.71502013-06-04T13:00:20Z2013-06-04T13:00:20Zhttp://www.softether.org/4-docs/1-manual/6/6.6This section describes all commands that can be called when using vpncmd in Use VPN Tools Command (for example, certificate generating tools or traffic speed test tool) mode. 6.6.1 "About": Display the version information Command Name About Purpose Display the version information Description This displays the version information of this command line management utility. Included in the version information are the vpncmd version number, build number and build information. Command-line About Arguments for "About": No arguments are required.   6.6.2 "MakeCert": Create New X.509 Certificate and Private Key Command Name MakeCert Purpose Create New X.509 Certificate and Private Key Description Use this to create a new X.509 certificate and private key and save it as a file. The algorithm used to create the public key and private key of the certificate is RSA 1024 bit. Y0.082032642037117854-docs/1-manual/6/6.63572014-01-04T14:00:48Z2014-01-04T14:00:48Zhttp://www.softether.org/5-download/src/2.unixRequirements You need to install the following software to build SoftEther VPN for UNIX. Linux, FreeBSD, Solaris or Mac OS X GNU Compiler Collectipon (gcc) and binary utilities GNU Make (gmake) GNU C Library (glibc) POSIX Threads (pthread) OpenSSL (crypto, ssl) libiconv readline ncurses   For example, the following command helps you to install the above programs on Fedora or CentOS Linux: yum -y groupinstall "Development Tools" yum -y install readline-devel ncurses-devel openssl-devel   How to Build To build the programs from the source code, run the following commands: ./configure make If any error occurs, please check the above requirements. How to Install SoftEther VPN Server, Bridge or Client To install the vpnserver, vpnbridge and vpnclient programs into the /usr/bin directory, run the following as the root user: make install After the installation will complete successfully: Execute 'vpnserver start' to 0.0812207326942215-download/src/2.unix5112024-01-19T04:30:12Z2024-01-19T04:30:12Zhttp://www.softether.org/4-docs/1-manual/4/4.2Installing SoftEther VPN Client installs SoftEther VPN Client Service, which always runs in the background, and two utilities that allow the user to operate VPN Client. General users do not need to pay attention to the service running in the background. The user can perform all VPN Client operations using VPN Client Manager and other user interfaces. This section describes the two types of tools used to operate VPN Client.   4.2.1 VPN Client Manager SoftEther VPN Client Manager is a utility with a Windows-supported graphical user interface (GUI) that allows the user to operate SoftEther VPN Client. Normally, the end user uses VPN Client Manager to operate VPN Client. VPN Client Manager allows the user to easily operate nearly all VPN Client operations by selecting menu items and entering required information in the GUI windows in the same manner as a conventional Windows application. Therefore, even users without much knowledge of VPN technologies can quickly operate VPN Client. VPN Client0.080959664286154-docs/1-manual/4/4.22532026-02-27T07:21:31Z2026-02-27T07:21:31Zhttp://www.softether.org/4-docs/1-manual/A/10.CBy combining the “VPN Azure” feature built into SoftEther VPN Server with the VPN Azure Service, you can create a remote access environment to your company LAN even when it is difficult to open firewall or NAT ports. This section explains how to use the VPN Azure feature to remotely access a LAN from an external location. 10.12.1 Overview of VPN Azure Make your office PC a dedicated VPN server for yourself. Conventional VPN server products needs to be installed and configured by network administrators. NAT or firewall must be set up to open a TCP/UDP port. At least one fixed and global IP address necessary. VPN Azure deregulates that limitation. If you use VPN Azure, you can connect from your home or mobile PC into your office PC easily. Your office PC becomes your dedicated VPN server. The VPN server initiates the TCP tunnel from the office PC towards a VPN Azure Cloud relay server, by behaving a normal HTTPS connection. Once such a "from behind a firewall" connection established, you can now0.079915161394211484-docs/1-manual/A/10.C7282023-08-31T03:49:02Z2023-08-31T03:49:02Zhttp://www.softether.org/9-about/News/905-TunnelCrackDaiyuu Nobori, August 31, 2023   TunnelCrack protection has been implemented in SoftEther VPN Client.   TunnelCrack is a security attack technique pointed out in the paper "Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables" presented at the international conference USENIX Security '23 on August 11, 2023.   The TunnelCrack attack technique is problematic when using malicious and untrusted public wireless LANs. Various popular VPN client software can be affected by the TunnelCrack attack method, which requires countermeasures on the part of the VPN client software.   We have added TunnelCrack protection in SoftEther VPN Client Ver 4.43 Build 9799 Beta (8/31/2023). TunnelCrack protection can be easily enabled from the settings screen and prohibits TCP and UDP connections for physical local network communication during the VPN connection. This provides additional protection when using untrusted public wireless LANs.   SoftEther VPN Client's TunnelCrack0.0798017230002649-about/News/905-TunnelCrack5242024-01-21T10:31:58Z2024-01-21T10:31:58Zhttp://www.softether.org/4-docs/1-manual/A/10.7This section will explain how to take the network configurations looked at in sections 10.4 Build a Generic Remote Access VPN and 10.5 Build a LAN-to-LAN VPN (Using L2 Bridge) and use them together.   10.7.1 Using LAN-to-LAN Communication and Remote Access Together In section 10.5 Build a LAN-to-LAN VPN (Using L2 Bridge) you read about a LAN-to-LAN VPN which was set up with VPN Server installed on the main LAN and VPN Bridge installed on the sub-LANs. The VPN Server installed on the main LAN for this type of network configuration can also receive VPN connection requests from VPN Clients. This means that it can be the VPN Server for the LAN-to-LAN VPN and the VPN Server for a remote access VPN at the same time. The figure below illustrates what it would look like if a user at a remote location (such as from a hotel on a business trip) made a remote access VPN connection to the VPN Server on the main LAN (Tokyo). An Example of How to Use a LAN-to-LAN Network and Remote Access Together. 0.0789389948044824-docs/1-manual/A/10.73342019-01-21T01:10:39Z2019-01-21T01:10:39Zhttp://www.softether.org/4-docs/1-manual/1/1.3SoftEther VPN Server, Client and Bridge are free software, and released as open-source. You can redistribute them and/or modify them under the terms of the Apache License 2.0.     License of SoftEther VPN                                  Apache License                            Version 2.0, January 2004                         http://www.apache.org/licenses/    TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION    1. Definitions.       "License" shall mean the terms and conditions for use, reproduction,       and distribution as defined by Sections 1 through 9 of this document.       "Licensor" shall mean the copyright owner or entity authorized by       the copyright owner that is granting the License.       "Legal Entity" shall mean the union of the acting entity and all       other entities that control, are controlled by, or are under common       control with that entity. For the purposes of this definition,       "control" means (i) the p0.078507062096120314-docs/1-manual/1/1.31422013-03-03T10:09:41Z2013-03-03T10:09:41Zhttp://www.softether.org/4-docs/1-manual/9/9.5This section describes how to uninstall SoftEther VPN Bridge from your system if you should no longer need this program.   9.5.1 Uninstallation in Windows You can uninstall the Windows version of VPN Bridge in the same way as uninstalling other application software, by clicking [Control Panel] > [Add or Remove Programs] and then removing the program. Add or Remove Programs Window.   To prevent the loss of configuration data created after VPN Bridge is installed and written log files, this data is not automatically deleted. These files remain in the VPN Bridge installation directory. If VPN Bridge is installed to the same directory thereafter, the system uses the configuration file (vpn_bridge.config) remaining after the previous uninstallation, so caution must be exercised. You can use Explorer to delete these remaining data files. Remaining Configuration Files and Log Files. 9.6.2 Uninstallation in Linux To uninstall the Linux version of VPN Bridge when vpnbridge0.0774343429302114-docs/1-manual/9/9.53252013-03-03T10:08:46Z2013-03-03T10:08:46Zhttp://www.softether.org/4-docs/1-manual/8/8.38.3.1 Uninstallation Add or Remove Programs Window.   Remaining Configuration Files and Log Files.   8.3.2 Virtual Network Adapter The Virtual Network Adapter created by the user when using VPN Client remains on the computer after VPN Client is uninstalled, in the same way document files created by the user when using a regular application remain on the computer after that application is uninstalled. This is to prevent the deletion of the Virtual Network Adapter settings configured by the user when VPN Client is uninstalled. The Virtual Network Adapter that remains on the computer after uninstallation can be deleted using the Device Manager of Windows. Window for Deleting the Virtual Network Adapter. 0.0773292624441144-docs/1-manual/8/8.32982025-06-30T07:42:29Z2025-06-30T07:42:29Zhttp://www.softether.org/4-docs/1-manual/A/10.4This section will explain how to set up a generic remote access VPN.   10.4.1 Connecting to a LAN Remotely In enterprise situations the most widely used type of VPN is the remote access VPN. By using a remote access VPN you can utilize an extremely inexpensive network such as the Internet to connect to your company's LAN from a remote location. Also, unlike with older protocols like L2TP/IPSec or PPTP, SoftEther VPN does not use IP routing and allows you to directly connect to a layer 2 segment. Using this type of VPN it is possible to connect to a company LAN from outside the office (for example, from an employee's house or from a hotel on a business trip) just as if they were connected by an extremely long Ethernet cable. 10.4.2 Using Local Bridging To build a remote access network you must create a Virtual Hub in your VPN Server and connect it to the target LAN already in place via a local bridge connection. Please refer to section 3.6 Local Bridges for more information about local 0.077242263321727484-docs/1-manual/A/10.43312014-03-16T00:20:49Z2014-03-16T00:20:49Zhttp://www.softether.org/5-download/src/1.windowsRequirements You need to install the following software to build SoftEther VPN for Windows. Microsoft Windows XP, Vista, 7, 8 or later. Microsoft Visual Studio 2008 with the latest SP (SP1 9.0.30729.4462 QFE). Note: Visual Studio 2008 SP1 is required to build SoftEther VPN on Windows. Please make sure that VS2008 'SP1' is installed. Visual Studio 2010, 2012 or 2013 is currently not supported. Visual Studio 2008 Express Edition is not supported. Standard Edition, Professional Edition, Team System or Team Suite is required.   Full Build Instructions The following steps will build all SoftEther VPN program files, and also build the installer packages of SoftEther VPN. It is very easy. Run the "BuildAll.cmd" batch file in the "src" directory. Wait until the building process will complete. The built files are stored on the "output" directory.   Build, Debug or Development on Visual Studio 2008 IDE If you are a programmer, you can open the So0.0771641226561725-download/src/1.windows5092024-01-21T07:20:10Z2024-01-21T07:20:10Zhttp://www.softether.org/4-docs/1-manual/A/10.3This section will explain how to set up a PC-to-PC VPN.   10.3.1 Configuring VPN Server You need one properly configured VPN Server machine to build a PC-to-PC VPN. A PC-to-PC VPN is the simplest type of VPN and allows client computers equipped with VPN Client to communicate with each other over the VPN. While there are no notably difficult tasks in building this type of network, you should be aware of the following things. Using Static IP Addresses You will configure the VPN Client's Virtual Network Adapter to connect to the Virtual Hub just as you would a normal physical network adapter. The easiest connection method is to manually assign static private IP addresses to each of the connected VPN Client's so that they do not overlap. For example, if 10 machines will be connecting to the Virtual Hub you can assign each of them an IP address in the range of 192.168.1.1 to 192.168.1.10 so that they will be able to communicate with each other. About APIPA (Automatic Private IP Addressi0.076976461108011514-docs/1-manual/A/10.33302024-01-17T10:11:20Z2024-01-17T10:11:20Zhttp://www.softether.org/4-docs/1-manual/1/1.4This section contains a description of operation principle and communication method of VPN that can be constructed by SoftEther VPN. An overview of the modules and functions that was used by VPN communications. And the types of VPN that can be constructed by using SoftEther VPN. 1.4.1 Conventional Ethernet Configuration SoftEther VPN implements the mechanism of Ethernet communications as it is by software and realizes VPN by creating a virtual network. The following is a brief description of the mechanism what Ethernet will operate. Ethernet Basics With LAN using common Ethernet standards (IEEE802.3) such as conventional 100Base-TX or 1000Base-T, multiple computers equipped with communications equipment (network adapter) that supports Ethernet is connected by star connection to a central switching Hub (also referred to as "layer 2 switching") and communicate freely with each other. Switching Hub and Network Adapter With Ethernet multiple computers you can communicate with each other. H0.076205453718737304-docs/1-manual/1/1.41432024-01-26T10:14:23Z2024-01-26T10:14:23Zhttp://www.softether.org/4-docs/1-manual/A/10.8If you expect a large number of simultaneous connections to your VPN Server based remote access VPN system like the one described in section 10.4 Build a Generic Remote Access VPN, you can use the clustering capability to perform load balancing across multiple VPN Servers. This allows you to decrease the load on each VPN Server and increase overall throughput. It also allows you to automatically introduce fault-tolerance into your network design.   10.8.1 VPN Server's Processing Limit A single VPN Server can theoretically handle up to 4,096 sessions at once. So, a VPN Server being used for a remote access VPN could handle approximately 4,000 VPN Client connections simultaneously. However, the problem in reality is not software limitations but hardware limitations such as limited memory capacity or CPU processing speed. That being said, if 4,000 VPN sessions were handled by a single VPN Server there would be issues such as significant transmission speed loss or insufficient memory on the VPN Se0.074685121477015814-docs/1-manual/A/10.83352024-01-18T01:19:36Z2024-01-18T01:19:36Zhttp://www.softether.org/4-docs/1-manual/2/2.6The SoftEther VPN command line management utility (vpncmd) is a superior command utility that can control settings or operation accomplished by conventional GUI by connect to a local or remote connection to SoftEther VPN Server, SoftEther VPN Client, and SoftEther VPN Bridge by command line or input file. 2.6.1 What is vpncmd? VPN Command Line Management Utility (vpncmd) SoftEther VPN command line management utility (vpncmd) is command interface (CUI) software that combines Windows control tools of SoftEther VPN Server administration utility and SoftEther VPN Client Manager described in 2.4 VPN Server Manager and 2.5 VPN Client Manager. vpncmd runs on an operating system that supports SoftEther VPN Server. It can also be used by Linux / FreeBSD / Solaris / Mac OS X. You can therefore administer SoftEther VPN Server by invoking vpncmd on the SSH console off a computers installed with SoftEther VPN Server, etc., and connecting to localhost. Invoking vpncmd from External Program By specif0.0740500269475534-docs/1-manual/2/2.61692024-01-19T10:46:34Z2024-01-19T10:46:34Zhttp://www.softether.org/4-docs/1-manual/4/4.7To construct a VPN server in an enterprise with a large number of users, the administrator may be required to implement measures to simplify VPN Client user operations and provide remote management of VPN Client on client computers. This section describes how to properly manage a large number of VPN Client users in a large-scale environment.   4.7.1 Remote Management of VPN Client VPN Client Manager is normally used to connect to and control the VPN Client service running on a local computer, but by properly configuring the settings, you can also VPN Client Manager to remotely operate VPN Client services running on remote computers. Setting VPN Client to Allow Remote Management To enable the remote operation of the VPN Client service running on a remote computer, [Allow Remote Management of VPN Client Service] must be enabled on the setting of the VPN Client service at the remote destination. The user can enable this option by clicking [Options] on the [Tool] menu of VPN Client Manager. 0.0733400580337344-docs/1-manual/4/4.72602024-01-26T03:51:10Z2024-01-26T03:51:10Zhttp://www.softether.org/4-docs/1-manual/A/10.5  This section will explain how to create a layer 2 connection between two or more remote networks with a bridge connection.   10.5.1 About Bridge-Connected LAN VPNs By using VPN Server and VPN Bridge you can create a layer 2 connection between a layer 2 segment (such as an Ethernet LAN) and another point on a public IP network such as the Internet. In the past, it proved physically difficult to connect two points together into a single segment via a layer 2 connection. Then, services such as Wide Area Ethernet appeared and it became possible to extend an Ethernet segment out to another location via common carrier networks. By using VPN Server and VPN Bridge together you can achieve what Wide Area Ethernet offers through an inexpensive broadband connection to the Internet. Furthermore, through the use of SSL, data transmitted between LANs can be encrypted. This means improved security compared to currently available Wide Area Ethernet or frame relay services.   10.5.2 Local Bri0.072764481985721034-docs/1-manual/A/10.53322024-02-21T09:40:22Z2024-02-21T09:40:22Zhttp://www.softether.org/4-docs/2-howto/1.VPN_for_On-premise/2.Remote_Access_VPN_to_LANEmployees need to connect to the company LAN from outside or home? Remote Access VPN realizes virtual network cable from a Client PC to the LAN from anywhere and anytime. Principles The ad-hoc network allows communications only for just VPN-established member PCs. However if your company has a lot of computers on the corporate network, it is not practical to install VPN Clients on all PCs on your company. This is the reason why Remote Access VPN is necessary for middle and large-scale corporate network. Remote Access VPN is an extended topology of the ad-hoc network. The difference between ad-hoc VPN and remote-access VPN is similar to Wi-Fi Ad-hoc mode and Wi-Fi Infrastructure mode. With Wi-Fi Ad-hoc mode, every computers must connected to the single Wi-Fi segment. Unlike this, Wi-Fi Infrastructure mode allows communicating computers on both Wi-Fi segment and Physical Ethernet segment. In order to build-up a Remote Access VPN you can use Local Bridge function in order to connect between Vi0.0696020698906084-docs/2-howto/1.VPN_for_On-premise/2.Remote_Access_VPN_to_LAN4352024-02-19T02:33:45Z2024-02-19T02:33:45Zhttp://www.softether.org/4-docs/2-howto/1.VPN_for_On-premise/3.LAN_to_LAN_Bridge_VPNGeologically distributed branches are isolated as networks by default. SoftEther VPN lays virtual Ethernet cables between your all branches. Then all computers of all branches are connected to the single LAN. Principles On each site SoftEther VPN can define a Virtual Hub, and connect between the Virtual Hub and the physical Ethernet segment with Local Bridge function. To exploit this mechanism you can bind two or more remote-distributed physical Ethernet segments to the single united Ethernet segment. It is something like a very-long distance Ethernet cable across the state. However building and keeping a distance Ethernet cable needs ultra-expensive initial and monthly costs. Unlike it, SoftEther VPN's virtual network cable needs no additional costs to the usual and cheap Internet connections to local ISPs on each branches.   Step 1. Set up SoftEther VPN Server on the Central On the headquarters or the datacenter of your corporate network, set up SoftEther VPN Server as the central0.0691143475073574-docs/2-howto/1.VPN_for_On-premise/3.LAN_to_LAN_Bridge_VPN4372024-01-26T09:27:28Z2024-01-26T09:27:28Zhttp://www.softether.org/4-docs/1-manual/A/10.6This section will explain how to create a layer 3 connection between two or more remote networks by utilizing bridge connections together with IP routing.   10.6.1 Combining Bridge Connections and IP Routing After reading section 10.5 Build a LAN-to-LAN VPN (Using L2 Bridge) you know how to connect multiple LANs together into a single layer 2 (Ethernet) segment, forming a LAN-to-LAN VPN. By combining that method and the Virtual Layer 3 Switching capability built into VPN Server you can construct a LAN-to-LAN VPN that utilizes layer 3 IP routing.   10.6.2 IP Routing Via Virtual Layer 3 Switching VPN Server has Virtual Layer 3 Switching capabilities which allow it to perform IP routing between multiple Virtual Hubs under the same VPN Server. By using this capability you can construct a large scale LAN-to-LAN VPN which works even if each individual LAN has multiple IP networks of its own. Please refer to section 3.8 Virtual Layer 3 Switches for a summary of Virtual Layer 3 Switchi0.068461051757019854-docs/1-manual/A/10.63332019-12-19T03:55:11Z2019-12-19T03:55:11Zhttp://www.softether.org/4-docs/3-kb/VPNFAQ001Question Is it possible to realize a redundant configuration when connecting multiple sites using SoftEther VPN? For example, if an ISP line or VPN server on the communication path fails, you want to automatically fail over to a spare ISP line or VPN server.   Answer   A redundant configuration can be realized by using Spanning Tree Protocol (STP).   VPN connection in SoftEther VPN is logically same as laying a very long Ethernet cable between multiple sites, and BPDU (Bridge Protocol Data Unit: IEEE802.1D) packets used in STP can pass through. So, you can realize a redundant configuration by combining a site-to-site VPN connection with SoftEther VPN and Layer 2 switching HUBs that support Spanning Tree Protocol (STP).   The idea is the same mechanism that multiple Ethernet cables are laid in the same building, and spare cables and ports are automatically used if a cable or a switching hub port fails. It can be used with any Layer 2 switch that supports Spanning Tree Pr0.0671478725482514-docs/3-kb/VPNFAQ0015212019-01-21T01:20:07Z2019-01-21T01:20:07Zhttp://www.softether.org/5-download/src/190121_switch_to_apache_license  Date: January 21th, 2019.   Declaration of license switch for SoftEther VPN from GPLv2 to Apache License 2.0 PDF Version   By the Development Board members of the SoftEther VPN Project.   The Development Board of the SoftEther VPN project hereby presents this declaration of license switch from GNU General Public License version 2 (GPLv2) to Apache License version 2.0. The change of the license takes effect immediately after this Declaration is published. We’d like to express our sincere gratitude and appreciation to all contributors who agreed to this license switch. We believe that switching the license of SoftEther VPN to Apache License 2.0 would make SoftEther VPN more suitable for various applications (e.g. hardware manufacturers). This would be beneficial for all the people who are (and will be) using SoftEther VPN for a wide range of purposes. SoftEther VPN has been open-source under the GPLv2 license since January 2014. The proposal to switch the softw0.0662930831602805-download/src/190121_switch_to_apache_license5182023-06-30T04:09:22Z2023-06-30T04:09:22Zhttp://www.softether.org/9-about/News/904-SEVPN202301June 30, 2023 by Daiyuu Nobori   Related: CVE-2023-27395, CVE-2023-22325, CVE-2023-32275, CVE-2023-27516, CVE-2023-32634, CVE-2023-31192   SoftEther VPN Security Advisory articles are published for high impact vulnerabilities (an arbitrary code execution or equivalent).   The SoftEther VPN project received a high level code review and technical assistance from Cisco Systems, Inc. of the United States from April to June 2023 to fix several vulnerabilities in the SoftEther VPN code.   The risk of exploitation of any of the fixed vulnerabilities is low under normal usage and environment, and actual attacks are very difficult. However, SoftEther VPN is now an open source VPN software used by 7.4 million unique users worldwide, and is used daily by many users to defend against the risk of blocking attacks by national censorship firewalls and attempts to eavesdrop on communications. Therefore, as long as the slightest attack possibility exists, there is great value in preventing vuln0.064131443809038079-about/News/904-SEVPN2023015232013-03-04T13:01:28Z2013-03-04T13:01:28Zhttp://www.softether.org/4-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/5.Mac_OS_X_L2TP_Client_SetupHere is an instruction how to connect to a VPN Gate Public VPN Relay Server by using L2TP/IPsec VPN Client which is built-in on Mac OS X. On this instruction, every screen-shots are taken on Mac OS X Mountain Lion. Other versions of Mac OS X are similar to be configured, however there might be minor different on UIs. These screen-shots are in English version of Mac OS X. If you use other language, you can still configure it easily by referring the following instructions.   1. Initial configurations (only once at the first time) Click the network icon on the top-right side on the Mac screen. Click "Open Network Preferences..." in the menu.   Click the "+" button on the network configuration screen.   Select "VPN" as "Interface" , "L2TP over IPsec" as "VPN Type" and click the "Create" button.   A new L2TP VPN configuration will be created, and the configuration screen will appear.   On this screen, you have to specify either hostname or IP address 0.0489963757003924-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/5.Mac_OS_X_L2TP_Client_Setup3762024-02-26T12:51:22Z2024-02-26T12:51:22Zhttp://www.softether.org/4-docs/2-howto/6.VPN_Server_Behind_NAT_or_Firewall/1.Dynamic_DNS_and_NAT_TraversalUnlike legacy IPsec-based VPN, even if your corporate network doesn't have any static global IP address you can set up your stable SoftEther VPN Server on your corporate network. Principles Traditional legacy VPNs require static and global IP address for the VPN Server. The IP address must be reachable from the Internet. However, a static and global IP address is very expensive. It costs monthly. It has also a security risk because your VPN Server must be exposed to public Internet. SoftEther VPN has a solution. SoftEther VPN Server has the built-in Dynamic DNS and NAT Traversal functions. Static IP addresses are no longer required to set up VPN Server. Even global IP addresses are no longer required. SoftEther VPN Server can be set up on the private IP address behind the NAT. Dynamic DNS The Dynamic DNS function assigns a world-wide unique identifier on your SoftEther VPN Server. Your global IP address of SoftEther VPN Server will follow dynamic IP address changes. If the IP address of So0.0424642854805064-docs/2-howto/6.VPN_Server_Behind_NAT_or_Firewall/1.Dynamic_DNS_and_NAT_Traversal4832018-07-25T04:22:49Z2018-07-25T04:22:49Zhttp://www.softether.org/5-downloadSoftEther VPN is open-source free software. You may use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of SoftEther VPN. Primary Download Server (hosted by Windows Azure): Download SoftEther VPN Language: English, Japanese and Simplified Chinese. OS: Windows, Linux, Mac OS X, FreeBSD and Solaris.   Download from CNET Download.com: Download SoftEther VPN from CNET Download.com   Download from Softpedia.com: Download SoftEther VPN from Softpedia.com   It is recommended to read Why SoftEther VPN and Tutorials before using SoftEther.   Source Code is Available ! You can download and build the source code of SoftEther VPN. The source code is provided on both our download site and the GitHub repository. Details on the SoftEther VPN Source Code   See also: What is different between SoftEther VPN and VPN Gate? Version History License of SoftEther 0.0414293546191355-download1082024-01-17T10:18:37Z2024-01-17T10:18:37Zhttp://www.softether.org/4-docs/1-manual/1/1.5Offering sufficient security is one of the most important matters for SoftEther VPN software designed and developed for the purpose of supporting backbone communication by company network, etc. Compared with older VPN solutions, SoftEther VPN software has new advanced security functions and offers sufficient security for VPN construction that can withstand the backbone work of businesses from small scale VPN. This section contains a description of the security functions that is offered by SoftEther VPN. 1.5.1 Abundant User Authentication Options The types of user authentication when connecting SoftEther VPN Client or SoftEther VPN Bridge by VPN to SoftEther VPN Server include all sorts of methods as well as simple password database. All types of user authentication and parameters can be set in details for each user. Because the user database is managed separately for each Virtual Hub, Virtual Hubs are independent of each other. User authentication methods that can be used will include the followin0.040385181320213934-docs/1-manual/1/1.51462013-03-04T12:48:47Z2013-03-04T12:48:47Zhttp://www.softether.org/4-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/2.iPhone_iPad_L2TP_Client_SettingThis document describes how to connect to your SoftEther VPN Server by using the L2TP/IPsec VPN Client which is bundled with iOS. On this instruction, every screen-shots are taken on iOS 6. Other versions of iOS are similar to be configured, however there might be minor different on UIs. These screen-shots are in English version of iOS. If you use other language, you can still configure it easily by referring the following instructions.   1. Initial configurations (only once at the first time) From the iOS main screen, start the "Settings" application.   Open "VPN" in "General" , and tap "Add VPN Configuration..." .         A new L2TP VPN connection setting will be created, and the configuration screen will appear.   On this screen, you have to specify either hostname or IP address of the destination SoftEther VPN Server. You also have to enter the user-name, password and secret (pre-shared key) on the iOS screen.   2. Connect a VPN You can s0.0398973745862544-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/2.iPhone_iPad_L2TP_Client_Setting3702024-02-26T11:33:15Z2024-02-26T11:33:15Zhttp://www.softether.org/4-docs/2-howto/5.VPN_for_Home/2.Comfortable_Network_AnywhereAre you a business man and running around the world? Most of Wi-Fi and local ISPs of several countries are discomfort to use because of packet filtering or censorship. So set up your private relay server on your home PC and use it from fields to gain ease. Back to Your Home Network Anytime from Oversea When you are traveling around the world you will notice that some hotel-room networks, airport Wi-Fi and local ISPs are restricting their IP networks with packet filters. The policies of IP network restrictions are vary around the world, however most of outside networks are filled with restrictions. SoftEther VPN helps you to keep the comfortable Internet access environment while you are traveling around the world. Before you depart your home you should install SoftEther VPN Server on your home PC. From the outside hotel room or Wi-Fi, you can connect to your SoftEther VPN Server on home. Then you can access to the Internet via your home. It means that your home PC is providing the relay function0.0397987753023234-docs/2-howto/5.VPN_for_Home/2.Comfortable_Network_Anywhere4752013-03-01T16:08:49Z2013-03-01T16:08:49Zhttp://www.softether.org/1-features/3._Security_and_Reliability3.1. Excellent Security and Reliability, Superior to Hardware You might have a question that whether SoftEther VPN is really secure as same as hardware VPN products or not. Someone might think that software VPNs is inferior to hardware VPNs. Of course, SoftEther VPN is implemented as a software code, not hardware as either specific integrated circuit. But it is absolutely correct that SoftEther VPN has an adequate security fulfillment as same as hardware's one, and moreover it might be superior to hardware VPN. What is Hardware VPN Products? Please see the fact that almost all hardware VPNs on the today's market is not a pure hardware. They are nearly software program, actually. Do you have any experience to open the top cover of any Cisco Router? You can see that inside devices on the Cisco Router is almost same as today's computer. The major differences are only the architecture of CPU. To reduce the manufacturing cost, Cisco and other VPN vendors adopts cheaper CPU than computers, such as M0.039719374015640491-features/3._Security_and_Reliability912024-01-25T17:25:04Z2024-01-25T17:25:04Zhttp://www.softether.org/4-docs/1-manual/A/10.2This section will look at topics that you need to know about when setting up any type of VPN.   10.2.1 VPN Server Location VPN Server Reachability at The TCP/IP Level A VPN Server must deal with connection requests from VPN Clients, VPN Bridges, and, in some situations, from other VPN Servers. Therefore, a VPN Server must be installed to a location that meets the following requirement: TCP/IP communication must be possible between the VPN Server and any VPN clients that wish to connect to it. (If you can go through a proxy server or change your NAT settings to allow traffic through certain TCP/IP ports to your private IP addresses then that is sufficient.) When setting up a VPN network with older VPN protocols such as PPTP or L2TP/IPSec, the VPN server must be a computer with a public IP address to the Internet. However with SoftEther VPN you don't have to install VPN Server on a computer with a public IP address. VPN Server will work just fine on a computer behind NAT or a f0.039671112023118384-docs/1-manual/A/10.23292024-02-25T14:26:58Z2024-02-25T14:26:58Zhttp://www.softether.org/4-docs/2-howto/4.VPN_for_IT_Professionals/1.Remote_Management Do you have a lot of servers, clients and printers of your client companies which are distributed around the state? SoftEther VPN helps a network administrator as a handy tool. Just from your desk, you can reach to any networks which you have installed SoftEther VPN in advance. Principles If you are an IT professional and managing a lot of IP-based devices and computers of customers around the state, it is very troublesome to reach to every devices from your desktop. Most of all devices which are located on the remote location are isolated from your office's network, and are placed behind the firewall of each customer. So you have to make a business trip to each location physically for regular maintenance and irregular troubleshooting. In order to reduce your costs and gain the comfortable daily business, use SoftEther VPN. You can install SoftEther VPN Client or SoftEther VPN Bridge on each location which you have to support as your business. SoftEther VPN Client and SoftEther VPN Bridge keeps0.03923825103238074-docs/2-howto/4.VPN_for_IT_Professionals/1.Remote_Management4652024-01-27T07:25:00Z2024-01-27T07:25:00Zhttp://www.softether.org/4-docs/1-manual/A/10.BBefore, administrator rights were a necessity when setting up a remote access VPN. But by using the SecureNAT capability built in to SoftEther VPN Server and SoftEther VPN Bridge you can build a remote access VPN that does not require administrator rights but retains all of the same functionality. This section will explain how to use SecureNAT to enable you to access your LAN from a remote location.   10.11.1 Utilizing SecureNAT to Make Things More Convenient About SecureNAT As explained in section 3.7.1 What is SecureNAT?, SecureNAT consists of the TCP/IP stack operated in user mode and Virtual NAT/Virtual DHCP Server. In particular, when IP access via Virtual NAT is performed the data is automatically relayed to the host using Socket API at the user level. This is a very advanced and intriguing technology. Accessing an Extremely Secure LAN Via Remote Access That Was Not Possible With Previous Technologies As explained in section 10.4 Build a Generic Remote Access VPN, to set up a VPN to0.039208853178231154-docs/1-manual/A/10.B3412024-01-18T15:36:36Z2024-01-18T15:36:36Zhttp://www.softether.org/4-docs/1-manual/3/3.9SoftEther VPN Server supports the clustering function. This section explains the clustering function.   3.9.1 What is Clustering? Clustering Necessity In general terms, clustering is a processing method which enables the distribution of a large processing load which would be difficult for a single computer to handle among multiple computers, and which appears to the user as a single system such that there is no need to be aware of the fact that it is coordinated processing performed in the background by multiple computers. SoftEther VPN Server features the clustering function, which gathers the VPN Server computers into one cluster to enable the handling of a large amount of processing as a whole where a single computer would normally not be capable. Aims of the SoftEther VPN Server Clustering Function The SoftEther VPN Server clustering function is designed and implemented to create the following two types of networks or a single network combining both. It is not designed or imple0.038990854520044834-docs/1-manual/3/3.92482013-03-04T12:53:07Z2013-03-04T12:53:07Zhttp://www.softether.org/4-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/3.Android_L2TP_Client_SetupThis document describes how to connect to your SoftEther VPN Server by using the L2TP/IPsec VPN Client which is bundled with Android. On this instruction, every screen-shots are taken on Android 4.x. Other versions of Android 4.x are similar to be configured, however there might be minor different on UIs. Some third-parties customizes the configuration screens of Android. These screen-shots are in English version Android iOS. If you use other language, you can still configure it easily by referring the following instructions.   1. Initial configurations (only once at the first time) Start the "Settings" application on Android.   In the "Wireless & Networks" category, open "More..." and tap "VPN".     Click the "Add VPN profile" button to create a new VPN connection setting.   A new VPN connection setting editing screen will appear. Input something string on the "Name" field (e.g. "vpn" ), and choose "L2TP/IPSec PSK" in the "Type" field.   On thi0.0387470165813934-docs/2-howto/9.L2TPIPsec_Setup_Guide_for_SoftEther_VPN_Server/3.Android_L2TP_Client_Setup3722025-04-16T07:49:44Z2025-04-16T07:49:44Zhttp://www.softether.org/5-download/historyThe revision history of each SoftEther VPN build is here.1 Download the latest binaries Download the source code   SoftEther VPN 4.44 Build 9807 RTM (April 16, 2025) (1) We have implemented the new "TunnelCrack Protection Function" in the VPN Client, which enhances security when using potentially untrusted public wireless Wi-Fi connections. For details, please refer to: https://ja.softether.org/9-about/news/905-TunnelCrack/ TunnelCrack is a security attack method pointed out in the paper “Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables,” presented on August 11, 2023, at the international conference USENIX Security ’23. The TunnelCrack attack method poses an issue when using a malicious, untrusted public wireless LAN. Various common VPN client software may be affected by TunnelCrack, and countermeasures on the VPN client software side are necessary. Therefore, we have added TunnelCrack protection to the VPN Client. This TunnelCrack protection featur0.0386527495736115965-download/history3872021-06-07T14:17:24Z2021-06-07T14:17:24Zhttp://www.softether.org/4-docs/2-howtoThis page describes how to build some typical examples of VPN networks.a SoftEther VPN is an essential infrastructure to build-up IT systems on enterprises and small-businesses. Ad-hoc VPN Make an ad-hoc VPN consists of the small-number computers with SoftEther VPN. Despite long-distance, it is easy to communicate mutually with any kinds of LAN-oriented protocols. LAN to LAN Bridge Geologically distributed branches are isolated as networks by default. SoftEther VPN lays virtual Ethernet cables between your all branches. Then all computers of all branches are connected to the single LAN. Remote Access to LAN Employees need to connect to the company LAN from outside or home? Remote Access VPN realizes virtual network cable from a Client PC to the LAN from anywhere and anytime.   SoftEther VPN can build-up flexible and dependable virtual network around Clouds. Amazon EC2, Windows Azure and most of other Clouds are supporting SoftEth0.038455042232511174-docs/2-howto1192024-02-26T05:48:57Z2024-02-26T05:48:57Zhttp://www.softether.org/4-docs/2-howto/4.VPN_for_IT_Professionals/3.Building_Your_Own_CloudYou want to build and provide your own Cloud service which can beat Amazon EC2 or Windows Azure? SoftEther VPN helps you to build an inter-VMs network and remote-bridging network between your Cloud and your customer's on-premise. Go Beyond Amazon EC2 and Windows Azure If you are planning to build an innovative new cloud service which can beat Amazon EC2 or Windows Azure, you must provide flexible VPN function around Virtual Machines. Amazon EC2 or Windows Azure has recently started IPsec-based VPN services. If you provides more sophisticated VPN for your new cloud services, your potential customers will be attracted on your new cloud services. SoftEther VPN is a suitable tool for building both your own Public Cloud Service and your Private Cloud Service. As described on "VPN for Cloud" , you can exploit SoftEther VPN's flexibility and ability to connect between user's on-premise computers and cloud VMs. Unlike legacy IPsec-based VPN, SoftEther VPN has advantages such as easy-configuration and L0.0383354441102774-docs/2-howto/4.VPN_for_IT_Professionals/3.Building_Your_Own_Cloud469