softether and upnp

[rasfar121]

Hi guys, so my fairy-tale continues....

i have successfully installed and setup softether on OPNsense and I am running an L2TP only server.

My home WRT connects to it fin and manages very good speed obvously as there is no encryption however it doesn't not seems to happily open and close ports for my device to work correctly.

I am using a playstation connected to WRT running a L2TP client on a private network which connects and actually has great speed but my NAT type is 3.
I am running a virtual NAT on SofEther and also have upnp installed on my baremetal server but the ps4 remains strict NAT type 3.

I have done the same setup with ubuntu running softether and it has worked in the past. I think my issue now is a firewall one and as upnp doesnt seem to like softether I am tempted to disable the firewall but too afraid to do that.

I would like to know if I disable FreeBSD firewall stop IPFW would that be the same as disabling OPNsense. I am rather new to this system and moved here as I have heard how robust it is so just some advice would do me well. Is there a way to get UPNP working with softEther (@Franco) as you seem so knowledgeable about upnp and your email is on it too.


Thanks again.

[rasfar121]

Albiet there not being much response I do know there must ba many people wondering how well Softether will work on OPNsense.

OK so now the plan has changed slightly, I am only in bridge mode to OPNsense and not using SE vertual NAT.

I have activated the DHCPv4 on my server. I connect from home WRT - AND I GOT VERY EXCITED

However the traffic is not going through the VPN server in Site 1. I cant load any pages or anything apart that I can see there is a connection.

Am I missing something? in DHCP server I can only add the internal LAN as the gateway but essentially I want it to go through the openVPN connection to SITE B


If anyone has any ideas on this please share. THanks

[Gauss23]

It's really hard to help you. You provide almost no information about your network. A graphical network plan is the least you could provide.

With WireGuard you gave up now you try with SoftEther always moving everything around. No wonder why it won't work. Do you really know what you're doing?

[rasfar121]

your tone is a bit harsh mate!

If you search you see sooooo many poeple having issues with Wireguard, the implementation could have been much better. I am sure many people would agree, its such a shame because the GUI of opnsense is great! I never had issues with ubuntu and guess what its native on linux maybe thats why its easier, im not going to go down a rabbit hole with it because I have to move on and see what works. My engineer had no idea why WG wasn't working even though we checked everything a million times. But I am a practical man and I cant waste time...

I have managed to get further with softether, now don't know why you are being an ass about it. Forums are a place to help, not to judge...

THE ONLY THING I DIDNT DO COMPLETE before was the log, and to be honest I couldn't figure out how to copy the log for you when the live log kept changing, there is no log download or anything like that.  But you are still judging me for just not posting a log. 


anyway ... bless you, I carry no hard feelings.

[rasfar121]

and here is a quick sketch on the network plan

[Gauss23]

Your sketch is not helping.

Here is a manual (in german) how to create a network plan for us, so that we're able to help
https://forum.opnsense.org/index.php?topic=7216.0

You just need to copy the template and insert your information. Especially networks with subnet mask and all routers/gateways involved is needed to understand how your setup looks.

This is needed for both sites. Then there will be someone who is able to tell you what the problem is.

If you think my tone is harsh: I'm not here for a long time. I decided to spend my vacances at home because of Corona. And as I now have some free time I decided to help people with their problems with OPNsense. But the questions people ask are just crazy. They provide no information at all about their network. Just because they know how their network looks, doesn't mean the people who try to help understand your setup.

I apologize if my tone was harsh, but it starts getting on my nerves when people expect help from an Open Source software and won't invest some minutes in presenting their setup in a structured way.

WireGuard is pretty new. It's maybe not perfectly integrated yet, but I never had an issue with it. I think you were close to a working solution.

When it comes to situations where the OPNsense is not the main router in the network it starts to get complicated. The main router in the network (default gateway for the clients) needs to know where to route which networks (static route). This is why we need to know how your network looks.

[rasfar121]

Thanks for the link, I'll get it done in the morning night time here now.

I had no idea that's what you wanted lol

No worries, were all living in troubled times.

Thanks again maybe worth filling it out and see what happens.