SoftEther VPN Bridge Guide

SoftEther VPN Bridge is software that lets you create cascade connections to a SoftEther VPN Server Virtual Hub and provides Layer 2 bridge connectivity.

VPN Bridge Overview

VPN Bridge is designed for the following scenarios:

  • Cascade connection: connecting remote networks over VPN
  • Bridge connection: joining physical and virtual networks
  • LAN extension: extending a local network across the Internet

Operating Modes

Service Mode

  • Automatic startup as a system service
  • Runs in the background
  • Recommended for permanent connections

User Mode

  • Runs in the user context
  • Requires an active user session

Differences Between VPN Server and VPN Bridge

FeatureVPN ServerVPN Bridge
Virtual HubMultipleOne (virtual)
Local bridgesSupportedCore function
AuthenticationFull systemSimplified
Cascade connectionsAcceptsInitiates
SecureNATSupportedNot supported

Configuring a Local Bridge

Creating a Bridge with a Physical Adapter


# Connect to Bridge management
vpncmd localhost /bridge

# Create a local bridge
BridgeCreate BRIDGE1 /DEVICE:"Ethernet"

Viewing Available Network Adapters


# List network adapters
BridgeDeviceList

Cascade Connections

Configuring a Cascade Connection


# Create a cascade connection
CascadeCreate CONNECTION1 /SERVER:vpn.company.com:443 /HUB:CORPORATE /USERNAME:bridge_user

# Set the password for the cascade
CascadePasswordSet CONNECTION1 /PASSWORD:bridge_password /TYPE:standard

# Connect the cascade to the local bridge
BridgeCreate BRIDGE1 /DEVICE:"Ethernet" /TAP:no
CascadeOnline CONNECTION1

Managing Cascade Connections


# Bring the cascade online
CascadeOnline CONNECTION1

# Take the cascade offline
CascadeOffline CONNECTION1

# Cascade status
CascadeStatusGet CONNECTION1

TAP Devices (Linux)

On Linux, VPN Bridge can create TAP devices for bridge connectivity:


# Create a TAP device
BridgeCreate BRIDGE1 /DEVICE:"tap_softether" /TAP:yes

Monitoring and Diagnostics

Viewing Statistics


# Bridge statistics
BridgeList

# Cascade connection statistics
CascadeList

Logging


# Enable logging
LogEnable packet /SWITCH:yes
Reviewed by OpenNix LLC · Last updated on