Can I somehow generate different .ovpn file? Because my old one got compromised.
It's a NAS or Synology NAS, not a Synology
On a DS418j it is (near) impossible to setup a vpn server because, by default, it LISTEN only on ipv6 udp. In fact it listen on the right interface but in udp6 rather than plain udp1194 protocol. (I am configuring an openvpn server) I managed to change that by editing the raw config file (sudo vi /usr/syno/etc/packages/VPNCenter/openvpn/openvpn.conf) +reboot, but as soon as you use the web interface to try to reconfigure openvpn, it revert back to udp6 and no longer work.
Obviously it's a bug, and a huge one.
Xtian.
Great video Juraj, thanks for this! I've successfully setup OpenVPN and I can connect to the NAS on external networks. I've noticed when connecting a warning appears "No certificate verification method has been enabled" – I understand this relates to Man-in-the-middle attacks and is a security risk. Would you know how I can fix this issue? I actually noticed you had the same warning so maybe it's not a concern.
I'm wondering if it's to do with my SSL cert – I used to have an SSL cert setup through Let's Encrypt on my own domain but I've now disabled DDNS as I only want remote access through the VPN. The certificate is still active and connects over HTTPs it's just not valid (i.e. green padlock icon). Do I need an SSL cert now that I am only accessing remotely over a VPN?
Any way to set up an auto disconnect of Download Station if the VPN disconnects?
I just spent an hour trying to figure out Synology support for OpenVPN including Synology's website- you answered my question! Thank You!!
Ahoj. Dakujem za videonavod. Asi blba ale otazka. V tom txt cofigu sa dava ip servera v LAN sieti? Lebo nemam verejnu ip. thx
Can I use internet from network (where synology works) if I connect via OpenVPN from phone? or it only VPN access to synology files?
What about the speed trafic with that vpn ?
You totally lost me at the end 🙁
I have followed your tutorial on securing Synology NAS. ( https://www.youtube.com/watch?v=uOH5XwAaZ9w ). Then I got here to setup VPN. When I enable apply OpenVPN server I get "to enable openvpn service please import the corresponding intermediate certificate first" message, OpenVPN does not get enabled. How can I import intermediate certificate?
Juraj- good video, thank you. I'm a guy who is just migrating from a WD My Cloud to a Synology. All the hardware is in various stages of arriving, nothing is setup etc. I'm just doing my pre-setup homework and have seen a lot of chatter in r/synology that you shouldn't leave your NAS directly connected to internet and should use VPN instead. So I plan to use OpenVPN on SynologyNAS VPN server and your video gives me the road map to do that. My questions: (1) Is this VPN server one that I would use ONLY to access my Synology Shares and my local LAN or is it also a VPN which I could use from public wifi at Starbucks / Hotels etc to improve my security? (2) Can I avoid paying for ExpressVPN or alternatives if I use this Synology VPN server?
I'm loving your Synology tips! I've been trying to set up a VPN, but every time I try to connect OpenVPN gives me the error "Missing external certificate". I imported the VPNConfig.ovpn (after editing the server IP etc). Any ideas?
Thank you so much for your video I do have some issue after connected toVPN. I am able to access my files thru mapped drive however I cannot surf the net. what to change in order to have my browser use local network?
Thanks man ! just subscribed 🙂 great videos! thanks again
Thank you soooo much Juraj! awesome tutorial, as always.
Your videos are great, including the one on Synology Security> Would you please consider doing a video on how to backup from a windows machine to a Synology via the Internet?
Awesome thanks. Works like a charm. For those who are struggling, make sure your router is set to forward port 1194 to the internal IP of your NAS. (Log into the router admin webpage and look for it under "virtual server" or "Firewall" or "port forwarding")
Tried to follow along with your instructions but I found it very confusing and not well explained. Not very good for new users who are still trying to learn how to set up the NAS. I wish you could release a more in depth video with each step fully explained.
I can connect tot he Diskstation from outside, however, the drives I can access in my home network are not accessible. Any idea how to fix this?
video very blur. watch until headache.
Can you map shared folder as network drive when you are connected with openvpn remotely. Please try it and confirm
thanks for the instruction video. But what is the use of the VPN if only use is to access NAS remotely, because Synology "QuickConnect" can also do this. In fact, I thought this VPN could be used from one country to another bypassing restrictions, can it?
does the synology vpn package combine the cert in the config file? when i load the config in the android client, it says no cert is attached, but it works if i "continue". the logs seem to say its encrypted, so i think it needs something to stop it from checking the cert?
trying to access files on my synology through vpn. I have green light on open vpn on source computer, but using the ip address set up from vpn server does not allow me to see drives. have i misunderstood how to use this?
Would have topped the icing on the cake If only you could have gone further and explained port forward with basic explanation I.e what information you need to enter in the router and where to get the information from.
Can you please include setup for call forwarding too. I am still unable to connect the VPN
Thank you for this helpful Video. I still got a question: I am now connected via vpn to my Synology. Now I want to imbed the drives into the explorer. How to do that? I actually tried with "Connect to Network" with the IP Adress of my NAS. But its trying to login forever. What can I do?
Can I somehow generate different .ovpn file? Because my old one got compromised.
It's a NAS or Synology NAS, not a Synology
On a DS418j it is (near) impossible to setup a vpn server because, by default, it LISTEN only on ipv6 udp.
In fact it listen on the right interface but in udp6 rather than plain udp1194 protocol. (I am configuring an openvpn server)
I managed to change that by editing the raw config file (sudo vi /usr/syno/etc/packages/VPNCenter/openvpn/openvpn.conf) +reboot,
but as soon as you use the web interface to try to reconfigure openvpn, it revert back to udp6 and no longer work.
Obviously it's a bug, and a huge one.
Xtian.
Great video Juraj, thanks for this! I've successfully setup OpenVPN and I can connect to the NAS on external networks. I've noticed when connecting a warning appears "No certificate verification method has been enabled" – I understand this relates to Man-in-the-middle attacks and is a security risk. Would you know how I can fix this issue? I actually noticed you had the same warning so maybe it's not a concern.
I'm wondering if it's to do with my SSL cert – I used to have an SSL cert setup through Let's Encrypt on my own domain but I've now disabled DDNS as I only want remote access through the VPN. The certificate is still active and connects over HTTPs it's just not valid (i.e. green padlock icon). Do I need an SSL cert now that I am only accessing remotely over a VPN?
Any way to set up an auto disconnect of Download Station if the VPN disconnects?
I just spent an hour trying to figure out Synology support for OpenVPN including Synology's website- you answered my question! Thank You!!
Ahoj. Dakujem za videonavod. Asi blba ale otazka. V tom txt cofigu sa dava ip servera v LAN sieti? Lebo nemam verejnu ip. thx
Can I use internet from network (where synology works) if I connect via OpenVPN from phone? or it only VPN access to synology files?
What about the speed trafic with that vpn ?
You totally lost me at the end 🙁
I have followed your tutorial on securing Synology NAS. ( https://www.youtube.com/watch?v=uOH5XwAaZ9w ). Then I got here to setup VPN. When I enable apply OpenVPN server I get "to enable openvpn service please import the corresponding intermediate certificate first" message, OpenVPN does not get enabled. How can I import intermediate certificate?
Juraj- good video, thank you. I'm a guy who is just migrating from a WD My Cloud to a Synology. All the hardware is in various stages of arriving, nothing is setup etc. I'm just doing my pre-setup homework and have seen a lot of chatter in r/synology that you shouldn't leave your NAS directly connected to internet and should use VPN instead. So I plan to use OpenVPN on SynologyNAS VPN server and your video gives me the road map to do that. My questions:
(1) Is this VPN server one that I would use ONLY to access my Synology Shares and my local LAN or is it also a VPN which I could use from public wifi at Starbucks / Hotels etc to improve my security?
(2) Can I avoid paying for ExpressVPN or alternatives if I use this Synology VPN server?
I'm loving your Synology tips! I've been trying to set up a VPN, but every time I try to connect OpenVPN gives me the error "Missing external certificate". I imported the VPNConfig.ovpn (after editing the server IP etc). Any ideas?
Thank you so much for your video
I do have some issue after connected toVPN. I am able to access my files thru mapped drive however I cannot surf the net. what to change in order to have my browser use local network?
Thanks man ! just subscribed 🙂 great videos! thanks again
Thank you soooo much Juraj! awesome tutorial, as always.
What happens when I see this message:
WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Your videos are great, including the one on Synology Security>
Would you please consider doing a video on how to backup from a windows machine to a Synology via the Internet?
Awesome thanks. Works like a charm.
For those who are struggling, make sure your router is set to forward port 1194 to the internal IP of your NAS.
(Log into the router admin webpage and look for it under "virtual server" or "Firewall" or "port forwarding")
Tried to follow along with your instructions but I found it very confusing and not well explained. Not very good for new users who are still trying to learn how to set up the NAS. I wish you could release a more in depth video with each step fully explained.
I can connect tot he Diskstation from outside, however, the drives I can access in my home network are not accessible. Any idea how to fix this?
video very blur. watch until headache.
Can you map shared folder as network drive when you are connected with openvpn remotely. Please try it and confirm
thanks for the instruction video. But what is the use of the VPN if only use is to access NAS remotely, because Synology "QuickConnect" can also do this. In fact, I thought this VPN could be used from one country to another bypassing restrictions, can it?
does the synology vpn package combine the cert in the config file? when i load the config in the android client, it says no cert is attached, but it works if i "continue". the logs seem to say its encrypted, so i think it needs something to stop it from checking the cert?
trying to access files on my synology through vpn. I have green light on open vpn on source computer, but using the ip address set up from vpn server does not allow me to see drives. have i misunderstood how to use this?
Would have topped the icing on the cake If only you could have gone further and explained port forward with basic explanation I.e what information you need to enter in the router and where to get the information from.
Can you please include setup for call forwarding too. I am still unable to connect the VPN
Thank you for this helpful Video. I still got a question: I am now connected via vpn to my Synology. Now I want to imbed the drives into the explorer. How to do that? I actually tried with "Connect to Network" with the IP Adress of my NAS. But its trying to login forever. What can I do?