SoftEther – do not route all traffic over a VPN tunnel for Windows 10, iOS, and Android native clients

.. aka split routing with Softether

Routing all traffic through a VPN connection can slow down internet speed. Many times you want to access remote resources only. Most internet traffic is encrypted anyway.

Here is a tutorial on how to configure SoftEther for split routing.

In this example we have the following configuration:
Remote network:
Router IP address: 192.168.178.1 <- the remote PC 192.168.178.92 is connected via DSL to the internet
Server IP address: 192.168.178.29 <- this is the PC we want access over VPN

1.) Click on Manage virtual hub

2.) Go to the virtual hub settings

3.) Enable SecureNAT and click on SecureNAT configuration

4.) Here is the secure NAT configuration.
Reminder: The remote network we want to access has the ip range:
192.168.178.1 – 192.168.178.254

The VPN clients are in a neighbour network within the DHCP ip range
192.168.179.10- 192.168.179.200
The virtual vpn server host listens to connections on : 192.168.179.1

5.) Set up split tunneling
click on ‘Edit the static routing table to push’

We want to access 192.168.178.29 (the remote server)

So, we tell the VPN clients how they find a route to this address:

Access ip range 192.168.178.0 – 192.168.178.254 over the virtual VPN gateway 192.168.179.1

The syntax for SoftEhter is:
192.168.178.0/255.255.255.0/192.168.179.1

Click: Enable virtual SecureNAT

Configure Windows 10 clients

Follow the pictures below to untick: Use default gateway on remote network

Configure iOS clients

Configure Android clients

Go to VPN settings on your Android device
Configure forward routing (sometimes you have to enable show advanced options first)

We want to access IP network: 192.168.178.1 – 192.168.178.254
Forward route for this is: 192.168.178.0/24

Leave a Reply

Your email address will not be published.