When it comes to Virtual Private Networks (VPNs), not all protocols are created equal. While OpenVPN and Wireguard are incredibly popular VPN protocols, their popularity has led to an increase in the protocol being blocked by some networks.
With SoftEther VPN, the encrypted tunnel is routed through the HTTPS port (443), effectively disguising the VPN as an SSL connection.
Here’s how to set up a SoftEther VPN over an HTTPS connection client on Windows and Linux.
How Does a SoftEther VPN Work?
SoftEther, which stands for “Software Ethernet,” is an open-source, multi-protocol VPN software. It’s lauded for its flexibility, allowing for a range of VPN protocols, including the increasingly popular VPN over HTTPS.
VPN blockingmethods primarily block commonly used VPN ports or the protocols themselves. VPN over HTTPS utilizes the SSL/TLS encryption protocols. This means that the VPN connection is camouflaged as standard HTTP traffic. This allows it to pass through most firewalls and web proxies without detection.
A SoftEther VPN requires both a client and a server. This article deals with the installation and setup of a SoftEther client. For the server setup guide, take a look at how toset up the SoftEther VPN server. You’ll need the hostname or IP address of your SoftEther server to complete the SoftEther client configuration in the next section, so do take a moment to do this.
Before we delve into the installation procedures, it’s important to note that only the Windows and Linux SoftEther clients support VPN over HTTPS. Furthermore, for both Windows and Linux, ensure you have the hostname or IP address of the SoftEther server and username and password.
Installing the SoftEther Client on Windows
Now, if you want tospecify your own DNS servers, you must edit the virtual network adapter settings within Windows.
To test if the VPN has connected successfully, you can visitWhatIsMyIPand check the displayed IP address. If it matches the IP address of your SoftEther VPN server, then your client is set up correctly.
Installing the SoftEther Client on Linux
To install the SoftEther client on Linux, you need to open a terminal and be logged in as root. Instructions for this installation are given for Debian/Ubuntu. Forother distributions of Linux, please adjust your commands accordingly. As the Linux installation process is somewhat longer than the Windows version, we’ve broken it into bite-sized chunks.
1. Update Your Software Repositories and Dependencies
Before you begin the client installation, first update your software repositories using the following command.
Next, install the required dependencies for the VPN client.
To do this, install the Lynxterminal-based browserand open the SoftEther download page.
Scroll to the bottom of the page to select the latest version or beta. SelectLinux, thenSoftEther_VPN_Client.
Select yoursystem architecture, select thesoftether-vpnclient-xfile, and press “d” to download. Finally, selectSave to disk.
Pressqto exit the Lynx browser.
Extract the archive. Note that your file name might be different if you have downloaded a newer version.
Navigate to the newly created VPN client directory:
Issue the make command to compile the software and accept the license agreement.
Now run the VPN client.
Before starting the configuration, test your system’s compatibility with the client. Select Option 3 (Use of VPN Tools).
Next, issue the following command:
If all the tests pass without errors, you may move on to configuration. Exit vpncmd by typingexit.
3. Configure the VPN Client
To begin configuration, run vpncmd again and select Option 2 (Management of VPN Client). Press enter to accept localhost as the client.
Create a new virtual interface to connect to the VPN server. You can use any name you wish.
Create a new client account and give it a name. You will need your SoftEther username and hub name for this step.
Set the password and authentication mode for the newly created account.
Check the status of the newly created account with the command:
4. Enable IP Forwarding
The account is now ready to make a connection to the SoftEther VPN server, but first, you will need to ensure IP forwarding is enabled.
This will return a value of 1 or 0. If the value is 0, then IP forwarding is not enabled. To enable it, edit thesysctl.conffile using the following command:
Find the line “net.ipv4.ip_forward=1” and uncomment it. Now save the file (ctrl-o, ctrl-x).
5. Make Your First SoftEther VPN Connection
Your account is now ready to connect to the VPN server. To do so, issue this command:
At this point, you can confirm the account has connected successfully by issuing the AccountList command:
Request an IP address from the VPN server via DHCP. Place the prefix “vpn_” before the virtual interface name. For example: “vpn_sevpn”
You will need to view the IP address assigned by the VPN server. Remember this address, as it is important for the next step.
Here, you can see the name of your virtual interface and the IP address that has been assigned. In the image above, it is highlighted in blue.
6. Set Up Static Routing
Now, you mustspecify the static routesso that all traffic is directed through the VPN rather than your default network gateway. To view your current routing table, issue the netstat command:
In the image above, you’re able to see the IP address allocated by the VPN server (vpn_sevpn), and you can see the default gateway (ens33). Your routing table will look different from the example provided, as every network differs. The default gateway IP will be different from the DHCP IP address you obtained from the VPN server from the previous step.
Once you have your default gateway IP, add a new route to your VPN server’s IP address via your default gateway. Please note thatyour VPN server IPis the IP of your SoftEther VPN server andNOTthe IP issued from the server via DHCP.
Delete your old default route.
After performing these route changes, the routing table will look like the table in the image above. Notice that the default gateway has now changed to the IP address issued via DHCP from the VPN server.
Now, test your connection by pinging an external IP, such as the Google DNS server:
Finally, check your SoftEther client connection is working correctly by checking your public IP address:
If the IP address returned is the same as your VPN server IP, everything is working correctly.
7. Disconnecting the VPN
To disconnect from the VPN, you need to start the VPN client configuration script again using the following command:
Now issue the AccountDisconnect command:
Now exit the client configuration and release the DHCP lease from the virtual network interface:
Next, stop the VPN client:
Now, edit your routing table by removing the route to your VPN server:
Finally, add a default route via your network’s local gateway:
Your network connection should now be restored.
Use the SoftEther VPN to Protect Your Online Privacy
Successfully setting up a SoftEther client and establishing a connection to its VPN server enhances your online security. Your SoftEther VPN remains discreet, defying even the most rigorous attempts at VPN detection and blocking.
