AWS EC2(CentOS)でSoftEtherを用いたVPNを設定する

$ sudo yum -y update
$ sudo yum -y install git gcc

$ tar zxvf softether-vpnserver-v4.34-9745-rtm-2020.04.05-linux-x64-64bit.tar.gz

$ cd vpnserver
$ make

$ sudo mv vpnserver /etc/vpnserver
$ sudo vi /etc/init.d/vpnserver

#!/bin/sh
# chkconfig: 2345 99 01
# description: SoftEther VPN Server
DAEMON=/etc/vpnserver/vpnserver
LOCK=/var/lock/subsys/vpnserver
test -x $DAEMON || exit 0
case "$1" in
    start)
        $DAEMON start
        touch $LOCK
        ;;
    stop)
        $DAEMON stop
        rm $LOCK
        ;;
    restart)
        $DAEMON stop
        sleep 3
        $DAEMON start
        ;;
    *)
        echo "Usage: $0 {start|stop|restart}"
        exit 1
esac
exit 0

$ sudo mv vpnserver /etc/vpnserver
$ sudo vi /etc/systemd/system/vpnserver.service

[Unit]
Description=Softether_VPN_Server
After=network.target

[Service]
Type=forking
User=root
ExecStart=/etc/vpnserver/vpnserver start
ExecStop=/etc/vpnserver/vpnserver stop
Restart=on-abort
WorkingDirectory=/etc/vpnserver/

[Install]
WantedBy=multi-user.target

$ sudo chmod 755 /etc/init.d/vpnserver
$ sudo /sbin/chkconfig --add vpnserver
$ sudo service vpnserver start

$ sudo chmod 755 /etc/systemd/system/vpnserver.service
$ sudo systemctl daemon-reload
$ sudo systemctl start vpnserver
$ sudo systemctl enable vpnserver

$ sudo /etc/vpnserver/vpncmd

vpncmd command - SoftEther VPN Command Line Management Utility
SoftEther VPN Command Line Management Utility (vpncmd command)
Version 4.34 Build 9745   (English)
Compiled 2020/04/05 23:39:56 by buildsan at crosswin
Copyright (c) SoftEther VPN Project. All Rights Reserved.

By using vpncmd program, the following can be achieved. 

1. Management of VPN Server or VPN Bridge 
2. Management of VPN Client
3. Use of VPN Tools (certificate creation and Network Traffic Speed Test Tool)

Select 1, 2 or 3: 

Specify the host name or IP address of the computer that the destination VPN Server or VPN Bridge is operating on. 
By specifying according to the format 'host name:port number', you can also specify the port number. 
(When the port number is unspecified, 443 is used.)
If nothing is input and the Enter key is pressed, the connection will be made to the port number 8888 of localhost (this computer).
Hostname of IP Address of Destination: 

If connecting to the server by Virtual Hub Admin Mode, please input the Virtual Hub name. 
If connecting by server admin mode, please press Enter without inputting anything.
Specify Virtual Hub Name: 

VPN Server> HubCreate main
Password: 【任意のパスワードを入力】
Confirm input: 【任意のパスワードを入力】

VPN Server> HUB main
VPN Server/main> UserCreate hiro /Group:none /REALNAME:none /NOTE:none

VPN Server/main> UserPasswordSet hiro
Password: 【任意のパスワードを入力】
Confirm input: 【任意のパスワードを入力】

VPN Server> IPsecEnable /L2TP:yes /L2TPRAW:no /ETHERIP:no /DEFAULTHUB:main

IPsecEnable command - Enable or Disable IPsec VPN Server Function
Pre Shared Key for IPsec (Recommended: 9 letters at maximum): 【用意した共有鍵を入力】

VPN Server/main> SecureNatEnable