Guide – How To Start – SoftEther – Free VPN Server on Linux CentOS Stream 9

SoftEther VPN is an optimum alternative to OpenVPN and Microsoft’s VPN servers. SoftEther VPN has a clone function of the OpenVPN Server. You can integrate from OpenVPN to SoftEther VPN smoothly. SoftEther VPN is faster than OpenVPN. SoftEther VPN also supports Microsoft SSTP VPN for Windows Vista / 7 / 8. No more need to pay expensive charges for a Windows Server license for the Remote-Access VPN function.

This is a quick deployment and ready-to-run image.
Simple and rapid installation. Easy to maintain.

SoftEther – Free VPN Server on Linux CentOS Stream 9

In case you have NSG’s or Firewall appliances in AWS Marketplace, you’ll have to open access to the following ports: 443, 992, 1194, 5555 TCP and 1194 UDP.

In order to open the ports, go to the Virtual machine’s settings in AWS Marketplace – open Networking and add the necessary ports.

Then you need to open these ports in the Windows firewall.

To do this, go to the “Windows Firewall with Advanced Security” console and create an inbound rule to allow TCP on port (443, 992…).

Software installation

1. To start remote server administration on the operator’s computer, you need to install SoftEther VPN Server manager.

2. In the “Select Component” drop-down list, select SoftEther VPN Server Manager for Windows.

3. In the Select Platform drop-down list, select Windows.

4. Download links will display. Select the latest version. 

5. Download the SoftEther VPN Server installer and run it after completing the download. In the window that opens, click “Next”:

6. Select the “SoftEther VPN Server Manager (Admin Tools Only)” and click “Next”:

7. After installation, run the program shortcut from the desktop.

Configuring the server

1. When opening, the following window will be displayed:

You must create a new connection. To do this, click on the button New Settings.

2. Specify the IP address of the Azure virtual machine in the Host Name line. Leave port 443 by default and click OK

3. To start the VPN Server admin panel, click Connect

4. At the first authorization, you need to set a new administrator password to connect to the server.

5. Next, in the “SoftEther VPN Server / Bridge Easy Setup” window, select the setting Remote Access VPN Server and click Next:

6. Next, enter a name for the hub you want and click OK: 

7. Click Exit in the “Dynamic DNS Function” window:

8. Click OK in the “IP / L2TP / EtherIP / L2TPv3 Settings” window:

9. Next, select Disable VPN Azure and click OK.

10. Next, close the window “VPN Easy Setup Tasks”.

11. Also, when creating each hub, you need to enable the Virtual NAT function. For this, you need to click “Manage Virtual Hub”:

12. Open “Virtual NAT and Virtual DHCP Server (SecureNAT)”:

13. Click “Enable SecureNAT”:

Adding new users

1. To work with VPN, first, you should add a user to the app.

Click on the “Manage Virtual Hub” button:

2. Then click on the “Manage Users” button:

3. To create a new user, click  “New”.

4. It’s necessary to insert the name of the user into the “User Name” field, type the password into the “Password” field and verify it by re-entering the password into the “Confirm Password” field. After the data were entered, click “OK”.

5. To change the user’s credentials, select the user and click “Edit”.

Create a configuration file

1. To create configuration files, click on the “OpenVPN / MS-SSTP Settings” button.

2. Click on the “Generate a Sample Configuration File for OpenVPN Clients” button.

3. When the window of the Windows Explorer is opened, select the path to save the archive:

4. The following files are in the saved archive:

5. You should save the file named “…_openvpn_remote_access_l3.ovpn”. 

Customize your VPN client

1. To customize the VPN Client, you need the OpenVPN Client for the work. Go to the site: Community Downloads | OpenVPN, download and install the OpenVPN client, depending on your OS, Windows:

2. Now the OpenVPN is ready to work, and you can run it. After it is started, add your VPN configuration file

3. Then enter “Username” (1), select the checkbox “Save password” (2) for your comfort, enter “Password” (3), and click “Connect” (4)

4. Click “Continue” to confirm use without a certificate

5. Now you can use your Virtual Private Network.