Documentation
SoftEther VPN Manual
SoftEther VPN Manual
SoftEther VPN Server Guide

SoftEther VPN Server Guide

SoftEther VPN Server is VPN server software that delivers high performance, rich functionality, security, scalability, and portability.

Operating System Requirements

SoftEther VPN Server supports a wide range of operating systems and hardware platforms:

Windows

  • Windows Server 2019/2022
  • Windows 10/11
  • Windows Server 2016 (and older versions)

Architectures: x86, x64

Linux

  • Ubuntu 18.04 LTS and later
  • Red Hat Enterprise Linux 7 and later
  • CentOS 7 and later
  • Debian 9 and later
  • SUSE Linux Enterprise Server

Architectures: x86, x64, ARM

Other Unix-like Systems

  • FreeBSD 10 and later
  • OpenBSD
  • NetBSD
  • Solaris 10 and later
  • Mac OS X 10.4 and later

Operating Modes

SoftEther VPN Server can run in two primary modes:

Service Mode

  • Runs as a system service
  • Starts automatically at system boot
  • Runs in the background
  • Recommended for production use

User Mode

  • Runs in the user context
  • Requires the user to be logged in
  • Useful for testing and development

Administering the VPN Server

Management Methods

  • SoftEther VPN Server Manager (Windows GUI)

    • Graphical interface for Windows
    • Convenient management through a GUI
    • Real-time monitoring

  • vpncmd (command line)

    • Cross-platform utility
    • Scripting and automation
    • Full access to all features

  • Web interface

    • Management through a browser
    • Access from anywhere on the network
    • Basic administration functions

Virtual Hub

Virtual Hub is a key concept in SoftEther VPN.

Each Virtual Hub functions as a separate virtual Ethernet switch.

Creating a Virtual Hub


# Create a new Virtual Hub with vpncmd
vpncmd localhost /server /cmd:HubCreate MYHUB /PASSWORD:mypassword

User Management


# Create a user
vpncmd localhost /server /hub:MYHUB /cmd:UserCreate john /GROUP:employees /REALNAME:"John Smith"

# Set the password
vpncmd localhost /server /hub:MYHUB /cmd:UserPasswordSet john /PASSWORD:secretpassword

Configuring Groups


# Create a group
vpncmd localhost /server /hub:MYHUB /cmd:GroupCreate employees

# Set group policies
vpncmd localhost /server /hub:MYHUB /cmd:GroupPolicySet employees /NAME:MaxConnection /VALUE:3

Local Bridges

A local bridge lets you connect a Virtual Hub to a physical network adapter on the computer, joining the virtual and physical networks.

Creating a Local Bridge


# Create a bridge with a physical adapter
vpncmd localhost /server /cmd:BridgeCreate MYHUB /DEVICE:"Local Area Connection"

Monitoring Bridges


# List active bridges
vpncmd localhost /server /cmd:BridgeList

SecureNAT

SecureNAT is a built-in NAT and DHCP server that lets VPN clients access the Internet through the VPN Server without any additional network configuration.

Enabling SecureNAT


# Enable SecureNAT for a Virtual Hub
vpncmd localhost /server /hub:MYHUB /cmd:SecureNatEnable

Configuring DHCP


# Configure DHCP parameters
vpncmd localhost /server /hub:MYHUB /cmd:DhcpSet /START:192.168.30.10 /END:192.168.30.200 /MASK:255.255.255.0 /GW:192.168.30.1 /DNS:8.8.8.8 /DNS2:8.8.4.4

Virtual Layer 3 Switch

The Virtual Layer 3 Switch lets you route IP packets between different Virtual Hubs and implement inter-network routing.

Creating an L3 Switch


# Create a virtual L3 switch
vpncmd localhost /server /cmd:Layer3Add L3SW

# Add an interface
vpncmd localhost /server /cmd:Layer3IfAdd L3SW /HUB:HUB1 /IP:192.168.1.1 /MASK:255.255.255.0

Configuring Routing


# Add a static route
vpncmd localhost /server /cmd:Layer3TableAdd L3SW /NETWORK:10.0.0.0 /MASK:255.0.0.0 /GATEWAY:192.168.1.100

Clustering

Clustering lets you combine several VPN servers to provide high availability and load balancing.

Configuring a Cluster


# Enable cluster mode
vpncmd localhost /server /cmd:ClusterSettingSet /CONTROLLER:yes

# Add a cluster member
vpncmd localhost /server /cmd:ClusterMemberAdd server2.example.com /PASSWORD:clusterpass

Monitoring the Cluster


# View the cluster status
vpncmd localhost /server /cmd:ClusterStatusGet

Logging and Security

Configuring Logging


# Enable connection logging
vpncmd localhost /server /hub:MYHUB /cmd:LogEnable connection

# Configure log rotation
vpncmd localhost /server /cmd:ServerLogSwitchSet /SWITCH:month

Access Lists


# Create an access rule
vpncmd localhost /server /hub:MYHUB /cmd:AccessAdd /RULENAME:"Allow HTTP" /PRIORITY:100 /SRC_IP:192.168.1.0/24 /DEST_PORT:80 /ACTION:allow

Monitoring and Statistics

Viewing Active Sessions


# List active sessions
vpncmd localhost /server /hub:MYHUB /cmd:SessionList

Server Statistics


# Overall server statistics
vpncmd localhost /server /cmd:ServerStatusGet

# Virtual Hub statistics
vpncmd localhost /server /hub:MYHUB /cmd:StatusGet
Reviewed by OpenNix LLC · Last updated on
SoftEther VPN OverviewSoftEther VPN Client Guide