How To Configure VPN Server with SE VPN Server Manager

Configure With SoftEther VPN Manager
You can easily manage your VPN server with the SE VPN Manager available on Windows/Mac. Click here to download it for your platform.

After you’ve downloaded the SE VPN Manager, add a new server.

Now fill out the server information and click Ok. Be sure you leave the Password field blank, as a new server will not have a password set. (Unless you specified one from CMD) Then you will connect to the server.

Upon first connection, you’ll be prompted to create a password if you haven’t already.

Now you should see a window called SoftEther VPN Server / Bridge Easy Setup. Select the first option Remote Access VPN Server and click Next.

If you see the following prompt, click yes:

You’ll be prompted to create a Virtual Hub, you can leave this as the default value VPN. Click OK.

You’ll now be presented with the Dynamic DNS settings. You can record this information if you’d like, however if your server is on a static IP address or a hostname, you won’t really need this. Click Exit.

You’ll now be presented with the IPsec/L2TP/EtherIP settings. Enabling L2TP with IPsec will enable devices to use that protocol to connect to the VPN server. L2TP/IPsec is included by default with many operating systems, and requires no third-party software to use on Windows, Mac, Android and iOS. If you want to enable this function, tick the first box Enable L2TP Server Function (L2TP over IPsec). You also need to select the default hub devices will connect to in the even that it is not specified upon connection. For example using [email protected] as a username would connect that user to hub vpn. If you do not specify a hub, you need to select a default hub here. After that, you’ll need to set a pre-shared key. Keeping the default value of vpn is acceptable as this is not a password to connect to the server. You’ll define users later.

Now you’ll be presented with VPN Azure Cloud settings. You can simply disable this and continue.

Now we need to create some users. Click Create Users to begin.

All you need to do is define a username and password for the user for a basic configuration. However, if you want to apply some security policies, you can do so for that user here. (I recommend you set the Privacy Filter Mode policy to servers where you do not want clients to see each other.)

With the new user now created, you can exit the Manage Users and VPN Easy Setup Tasks windows. Now select the virtual hub on your server and click Manage Virtual Hub.

Click Virtual NAT and Virtual DHCP Server (SecureNAT)

In order for clients to route traffic correctly and connect to the Internet, you need to enable SecureNAT. Do this here by clicking Enable SecureNAT. Once done you can simply close that window.

You should now be good to go! If you’re using the SoftEther VPN Client, you simply input your username/password and the virtual hub you want to connect to. If you’re using OpenVPN, you need to get your config first. Do this by returning to the main server window and select OpenVPN / MS-SSTP Setting. Then, click Generate a Sample Configuration File for OpenVPN Clients. You may need to edit this file and correct your hostname if you’ve disabled DDNS.

Congratulations! You’ve now set up your server.