リモートワークに伴い、事務所のPCへのリモートアクセスだけでは不便なので、VPN(L2TP/IPsec)のVPNサーバーを構築しました。
UbuntuのサーバーにSoftetherをインストールして、WindowsのVPN サーバー管理マネージャーから設定しました。
Mac用のVPN サーバー管理マネージャ ーもあるのですが、起動しない？ので急ぎでほしいので一旦Windowsで設定しました。
設定は完了しているのですが、macにVPNを設定して接続しても「サーバーとの接続が確立ができません」と出てしまうので、CUIから設定します。
# ./vpncmd
vpncmd command - SoftEther VPN Command Line Management Utility
SoftEther VPN Command Line Management Utility (vpncmd command)
Version 4.34 Build 9745 (English)
Compiled 2020/04/05 23:39:56 by buildsan at crosswin
Copyright (c) SoftEther VPN Project. All Rights Reserved.
By using vpncmd program, the following can be achieved.
1. Management of VPN Server or VPN Bridge
2. Management of VPN Client
3. Use of VPN Tools (certificate creation and Network Traffic Speed Test Tool)
Select 1, 2 or 3: 1
Specify the host name or IP address of the computer that the destination VPN Server or VPN Bridge is operating on.
By specifying according to the format 'host name:port number', you can also specify the port number.
(When the port number is unspecified, 443 is used.)
If nothing is input and the Enter key is pressed, the connection will be made to the port number 8888 of localhost (this computer).
Hostname of IP Address of Destination:未入力でエンター
If connecting to the server by Virtual Hub Admin Mode, please input the Virtual Hub name.
If connecting by server admin mode, please press Enter without inputting anything.
Specify Virtual Hub Name:未入力でエンター
Password: ********GUIのツールで入れた管理パスワード
VPN Server>HubList
HubList command - Get List of Virtual Hubs
Item |Value
------------------+-------------------
Virtual Hub Name |VPN （ GUIで作成したHubが表示される ）
Status |Online
Type |Standalone
Users |1
Groups |0
Sessions |0
MAC Tables |0
IP Tables |0
Num Logins |0
Last Login |2020-04-07 17:25:03
Last Communication|2020-04-07 17:25:04
Transfer Bytes |7,077
Transfer Packets |21
The command completed successfully.
VPN Server>UserList
UserList command - Get List of Users
Before executing this command, first select the Virtual Hub to manage using the Hub command.
VPN Server>HUB VPN ハブを選んでから
VPN Server/VPN>UserList
UserList command - Get List of Users
Item |Value
----------------+-------------------------
User Name |dp-user
Full Name |dp-user
Group Name |-
Description |
Auth Method |Password Authentication
Num Logins |0
Last Login |2020-04-07 (Tue) 17:25:03
Expiration Date |No Expiration
Transfer Bytes |7,077
Transfer Packets|7,077
The command completed successfully.
VPN Server/VPN>IPsecEnable
IPsecEnable command - Enable or Disable IPsec VPN Server Function
Enable L2TP over IPsec Server Function (yes / no): yes
Enable Raw L2TP Server Function (yes / no): no
Enable EtherIP / L2TPv3 over IPsec Server Function (yes / no): no
Pre Shared Key for IPsec (Recommended: 9 letters at maximum): xxyba
Default Virtual HUB in a case of omitting the HUB on the Username: VPN
The command completed successfully.
VPN Server/VPN>
VPN Server/VPN>SecureNatEnable
SecureNatEnable command - Enable the Virtual NAT and DHCP Server Function (SecureNat Function)
The command completed successfully.
VPN Server/VPN>最後のSecureNatEnableがキモで、これでMacから接続が出来るようになりました