Setup Synology OpenVPN Server (easy, secure, remote access)
Вставка
- Опубліковано 16 лип 2024
- Visit snhu.edu/spacerex to see what the current average annual salary for a computer scientist is and request free information about the program. Thanks to SNHU for sponsoring this video!
This tutorial goes over how to setup an OpenVPN server on a Synology NAS to get secure remote access back into your network using a VPN tunnel. This allows you to access your Synology NAS as well as any other devices on the local network security, from where ever you are in the world.
Hire Me! www.spacerex.co/hire-me/?utm_...
Post on the Forums! forums.spacerex.co/
Other Videos Mentioned:
Unifi Port Forwarding: • Setup Port Forwarding ...
Complete Remote Access Guide: • The Complete Guide to ...
Forum post on VPN hostnames: forums.spacerex.co/t/openvpn-...
OpenVPN Client for windows / Mac / Linux: openvpn.net/client/
Best Synology Line up*:
DS923+ : amzn.to/3IFQb79
DS1621+: amzn.to/3SesIge
DS1821+: amzn.to/3IhBaXr
RS1221+: amzn.to/3SiOL5I
#vpn #tutorial #selfhosted
TOC
00:00 Introduction
01:35 VPN vs VPN Server
02:38 Thanks to SNHU for sponsoring this video!
03:56 Who can't use OpenVPN
05:25 OpenVPN Setup
10:44 Open port on firewall
12:15 Port forwarding on your router
15:06 Enable DDNS
16:34 Export and edit VPN configuration
18:29 OpenVPN Connect
19:31 Accessing files from anywhere using SMB
22:35 Additional configuration options
23:56 Conclusion
*These are affiliate links, which means that if you purchase a product through one of them, I will receive a small commission (at no additional cost to you). Thank you for supporting my channel! - Наука та технологія
UPADTE: OpenVPN connect for Windows recently updated, and broke this config. This is the fix: www.spacerex.co/how-to-fix-synology-openvpn-server-windows-unknown-unsupported-options/
Thanks for this Information! I`ve tried it the whole day but it didnt work. As soon i disabled the "pull Phrase" it worked instantly
I am glad! Yeah this has been annoying for me as I had a bunch of clients emailing me about this all of the sudden!
And what about the MacOs version? I setup the OpenVPN 2 weeks ago, with your video. Worked perfect. Now it stopped working. I tried the windows fix # pull but it still doesn't work. Super strange... Any idea @spacerex?
I tried this and that error doesn’t show anymore, however I still cannot connect it gives a timeout error. Do you know what could be the issue ? How can I verify that the port forwarding was done correctly?
Still doesn't work. Error message: option_error: Neither 'client' nor both 'tls-client' and 'pull' options declared.Openvpn3 client only supports --client mode.
I followed SpaceRex's instructions from his first video a couple of years ago on setting up OpenVPN on my Synology 920+ NAS. OpenVPN has been working flawlessly ever since 👍!
I can access everything from watching my movies on PLEX, to playing my Playstation 5 remotely, to making small configurations and retrieving files from my Windows and MAC machines remotely with OpenVPN and my Synology 920+ NAS. SpaceRex's tutorials are awesome 👌!
This is the best video on this topic. It just covers everything, even a multi-router setup. No more questions, no additional research!
Will recommend.
I've watched about a dozen of your Synology Nas tutorials and never had a single issue with anything. you explain everything in detail but not in a too techy type of way.
Also when you mentioned people might have a router and an other router (which i have) i was relieved, because you explained it very well!
Thanks alot for your help and keep it up👍
AWESOME! AWESOME! AWESOME! This was so detailed, with lots of incredible information. Thank you so much for taking the time to create this video!
Thank you! I've been trying to figure this out for a year off and on and could never get all of the little things just right to get the connection working. Your video explained exactly what needed to be done. Thank you for being thorough
Excellent ! I have researched quite a lot of documentation & You Tube tutorials on this subject but no one has come close to this finite step by step guide. Wonderful ! Thank you very much
Great job on the tutorial!! I was stuck for a few days on this. Editing the openvpn export file did the trick for me! Thank you!!
OH! So great! Thanks so much. We`ve been months trying to connect from external networks and now we could. Really gratefull man
Fully appreciate all you've shared with your channel. A lot of great info. Something also to be said about weighing using an openvpn via your router or NAS.
Thanks for the video, Will! Content is easy to understand and to follow along. Very helpful.
Great video - followed the instructions and everything just worked! Thanks!
I really appreciate your in-depth instructions to set up Synology -
Kudos!!! Thank you so much for this in-depth walkthrough tutorial!!!!
thanks - worked perfectly. your instructions and video guide are top notch
you just saved my life. huge thanks. really really appreciate your work!!
Exactly the help I needed. Thank you very much!
Beautiful! I got it to work. thanks!
Amazing video. Clear and detailed. Worked perfectly for me.
super useful and detailed explanation and video, this is very useful especially when I'm abroad for work/vacation
Thank you for doing these tutorials. Synology should pay you handsomly!
Really good video! Helped me a lot! Very clear and useful!
Hey man... your video was amazing... I recently moved to a new location and your video help me trouble shoot why my NAS was no longer working... turns out my port forwarding wasn't active. Thanks so much!!
I'm going to take a look!!! I'm using cloudlfare tunnels (ZeroTrust) (free) to access my NAS and all my local services from internet. Works awesome because it encrypts the whole connection and also hide all my ports. No port forwarding in my router. It also works flawlessly when sharing files through Synology with others. The link NAS creates when sharing a files, goes through the tunnel too. No port on the link either. You should do a cloud flare tunnel tutorial.
The other good thing about cloudflare is it doesn’t matter if your IP changes and also it doesn’t matter if you are behind a CGNat. Also, you don’t have to install a client software to others to be able to access it (you only have to install ONE client inside your network)
🙏. Hey man, thanks for your videos, I’ve learn a lot watching all your videos
Thx a LOT. Woked perfectly
This was very easy and worked on my first try.. Thank you
Great work. Thanks for the good explanation.
love it. i just think about how can i config my own nas and your video just popup on my feed 2h after you uploaded 🎉 thanks a lot :)
Supper I made it and it works just like charm
Thanks for detailed tutorial
11:40 helped a lot, thx mate!
Dude i fricking love your intro. Calms my nerves. Hope you are doing well!
Awesome tutorial, for some reason tailscale didnt work for me some I needed another option, this worked great
Well watching this video took a bit longer than the 24:23 it shows for me to get through. Been meaning to accomplish this for quite some time now. Finally walked through it step by step with you and I'm now running OpenVPN on the NAS and connected via my iphone. Made sure Plex worked on the iphone and no problem. The next thing I tried to do was connect over the VPN using the Marantz remote app to see if I could crank the volume on my wife when I'm not home. No joy. Probably for the best. ;) Anyway, thanks so much for walking me through this. Just need to get my laptops connected. Although not sure how I'd test it without taking them away from my home network. In due time, but before I'm on the road again.
You are the man! Thanks
Thank you for your work! my like
Thx! Good tutorial!) This and others)
Very good instruction! ⭐⭐⭐⭐⭐
Very helpful, thanks
Might be cool to do a video on Synology and tailscale, your a good teacher!
Thank you!
Thanks!
thank you!
thank you! That helped me to restore my VPN after it broke for some reason.
Thank you sir
Thanks heaps.
I have 2 routers from the same ISP. The oldest one had NAT loopback and worked fine for external access but then I upgraded to the newer version to get better wifi and I have always had issues as the new one doesn't have NAT loopback. I resonated with your comment about having 2 routers. Let's say my primary (old one with NAT loopback) router connected to the internet is 192.168.1.1 and my newer router is 192.168.1.2. With your example port forwarding 7854 would I put the destination IP address as 192.168.1.2?
Great tutorial ! I had 1 problem though, I wanted a different external port from the internal port (I know overkill) and it did not work at first. I figured out that the port put in the ovpn file was the internal port but needed to be the external port. Most people wont have that problem, but if you redo this video later Id give a warning when editing the ovpn file or make an example with different ports. I though Id mention it hoping its could help. Thanks for sharing your knowledge !
I need to check this out, thanks🎉
Great video again. However I will stick with Tailscale you showed some time ago. It is perfect for me. I do use quickconnect too because I have some people uploading foto's to a very specific folder. However I wanted a good tutorial on Open VPN and now I have it.
Nice!
10:41 It is worth to mention that many of hotels blocks all ports except 80, 433. So, if you set port 7854 you will be not able to reach/use your vpn.
Running into this exact scenario. What's the workaround?
Hi Will, big fan of your tutorials! What's your POV on running OpenVPN on NAS vs capable router (e.g. rt6600ax)? Assume router would be preferred? (more secure, easier to configure as no port forwarding required) but NAS would not get its 10.x.x.x direct IP?
I’ve got openvpn up and running. Works beautifully. I can’t get it to work using a reverse proxy though.
Awesome presentation!! Thank you!! I always wanted to learn more about VPNs, and I certainly learned a great deal from your tutorial. Would you consider doing a presentation on Synology's RADIUS server, as I have had only moderate success with setting them up? The only way I got it to work is by forcing my laptop to ignore certificates (not a good idea).
Will you make quite good tutorials, hope you crack the 100k subs this year.
Thanks SpaceRex!
I was wondering if you could do a video on synology routers? I have a very old router from 2013 and want a new one. But I have no idea where to start!
Thank you for your great content!
I’d strongly recommend an Eero or Ubiquiti Dream Router over Synology’s routers from experience. Synology don’t support mesh, or at least didn’t when I last checked for one thing.
Need to know more on Static Route Guide for Remote to Home usage of network mapped drives
Worked flawlessly, thanks, man. Only thing is, the android App won't let you check the "missing external certificate" i need to confirm every connection. not a problem.
I have this working now, thanks very much for the video - I did have to enable UPNP however because standard port forwarding on my router didn't appear to be working. Allowing the synology to create the upnp ports does. One problem...the vpn is also allowing access to other internal ip addresses (such as the router itself) - have I missed a step somewhere? I really just wanted the vpn for access to the nas.
you can setup with dynamic IP using DDNS in external access on your NAS
Very well explained thank you. I have the VPNsec function in my AVM router and the new version VPN Wireguard with Wireguard can be created with 1 click.
My question is what is the difference? if I have VPN directly in the router.
Greetings from Germany👋👋👋
Hey Will, the greeting is so quickly delivered in your part of the world, i took a breath and almost missed it. a very good day to you too 😃
thanks for the video... love your content
@spaceRexWill I have a question. I cant connect on public wifi on the train. The solution to this has been said to open port 443 and have a tcp connection. My question is it safe to do so on my nas with openVPN? By the way great tutorials. Learning al lot.
Thanks for this video. How I can use this setup with router RT6600ax?
Hi. Thanks so much for this setup. I installed it for some months now and have been using it to access the server remotely but the only problem I have is slow speeds. The most I'm getting from it is 10mbs but I have a gigabit switch and internet line of 100mbs for on both sides. Can you please advise what I can do to optimize my speeds. And I even looked into an option you recently mentioned for cloudfare but apparently it has a limit of 100mb.
Just stumbled across this now. Great video. Thanks! Here´s my problem:
We have a Synology NAS in our small office. Years ago, somebody set up Open VPN on it, the config file is in my OpenVPN directory. mNow I got a Synology NAS for my home. Can I service two separate NASs through OpenVPN on the same Windown computer? Thanks in advance!
Love these tutorials! Thank you. However, could you please please please create tutorial on how to set up OpenVPN for use with Plex for remote access? Or possibly, a better way to do think somewhat securely. I'm in process of researching "secure" remote access options and getting lost in rabbit hole of possible solution. I just want to be able to remotely watch my Plex content in somewhat secure manner but can't quite figure out how that works, i.e. how do I connect my TV up with VPN to connect to my NAS over secure connection? Thank you
Hi, very nice video, i was able to setup everything from A to Z thanks to you. However, i can't connect to Synology Drive, Synology Photos, etc with 10.8.0.1, any idea why ? I'm not using Synology's firewall
great tutorial, is it safe to use an admin account to connect to OpenVPN or should I only use a normal account?
Thanks! I followed this video and it didn’t work, had to disable compression and comment out comp-lzo and it works now!
Excellent presentation and tutorial !
Has anyone managed to configure a Synology DSM OpenVPN server and client using a Netgear Nightawk M2 (MR2100) mobile router ?
Is there a way to connect to my NAS using it's IP when I connect with my OpenVPN? I can get the smb drive to connect, but can't get to the NAS through it's IP. When I had the VPN setup as L2TP/IPSec I could access the Synology web gui. Great video, I appreciate all you do!
Thanks for the video....I'm not sure if this is a client server VPN or a peer to peer vpn. I like to know what limitations might someone might have like using hyper backup, does this use ports, or can use quick connect
Followed every step except for Port Forwarding already set up and was getting SO FRUSTRATED. Been having problems with router VPN as well. Discovered that my Port Forwards all had TCP rather than UDP. Such a simple fix! I think quite some time ago I tested and got much better throughput with TCP. I don't remember the details any more, but that's what i get for knowing just a little about a lot of things. Enough to be dangerous.
Thank you for brilliant easy to understand video. Do you know a way to connect a vpn connection together with vpn server running on my Synology? I want to use a vpn to hide my synology traffic.
You mentioned having two routers. What's the reason for that? I got my own mesh router but I replaced the ISP router with it as opposed to adding it.
Question, can my son remotely backup his MacBook Pro while at College to a NAS at our home? Also, can he backup his iPhone as well? Thanks and love the videos!
Hi Will, this is all very good but how do I setup my laptop to log into my servers and have the same drive mappings as I do at home on, say, my desktops? This is something I can do with my work laptop, so it must be possible somehow. This would make for a really interesting and useful video. Thanks.
Hello, I have an issue using this configuration. I cannot play videos on Synology Drive and Photos due to invalid certificate. It require to play video through HTTP, but since this port is close, it doesn't work neither. Do you know how to generate a working certificate (Let's Encrypt), so I can still use Drive and Photo as usual, over HTTPS? Thank you!
I've had 2 problems - port forwarding and CA certificate for Proton OpenVpn. Port forwarding issue was answered - Starlink so it will not work. The CA Certificate seems to be a non-issue...Great coverage. Thanks
Hi, I followed your instruction and it worked well. However on the client side (my laptop), the ovpn sometimes asking the client certificate. Is it something important? Or the client will work just fine without the certificate? And if it is something that adding another authenticating level, how am I create the certificate?
I am hoping that anyone can answer my question as I cannot stop thinking to be curious about it.
Thanks
@spacerexwill Is OpenVpn more secure and easier than Tailscale? Or do they provide different services? The video was good but at the end I wondered what the diff was between the 2.
It would be nice to have explanation how to authenticate using certificate.
Silly question... If you use open vpn with your nas, does anyone else using a service hosted on your nas such as web service through docker still need to have vpn or they're all good just as before? (I've enabled some of my services through reverse proxy that my friends use, they just use the services and are not needing to log into the nas)
I wasn’t able to connect with openVPN until I’ve added following rule in the config file (under my remote IP)
client-cert-not-required
Hi , thanks for your video ! I trying to use a windows RDP connection with openvpn but I cannot reach the distant computer by Name or DDNS , always need to use IP 10..... ( dyn IP) . When connected with VPN , we don t see other Lan connected .
Probably some settings but impossible to set static ip to VPN client so difficult ro reach RDP connection. Thanks in advance for your support
If someone have 2 routers setup then second router on wan must have static or fixed IP on wan side to portfording wil works - you can set this in first router using dhco reservation or manualy set wan ip on second router bot set ISP modem on bridge mode will be works beter
Thank you! This works v well. However, I turned off my Sybnolgy NAS for 5 days as we had workers in the house. After turning on the NAS after 5 days the VPN stopped working. I saw certificate errors in the VPN client log (see below). I had to delete the VPNServer package, including the database and start again. Now it's working ok. Any ideas why it failed, please?
Error: "VERIFY ERROR: depth=0, error=certificate signature failure: C=TW, L=Taipel, O=Synology Inc., CN=synology"
If I have a Synology router would you recommend doing the vpn set there and not on DSM?
Have you noticed any remote connection trouble with 7.2? I can no longer connect to the remote Nas with hyper back up and hyper Backup. Volt. It continues to say the remote location is off-line when I definitely have the right IP, port, etc entered in. Both servers were Juat updated to 7.2
I think Tailscale vpn is one best and zero configure required.
instead of tailscale, could we use some VPS provider to get a similar functionality? I just don't want to use my SSO identity for tailscale..
Is it possible to have synology/openvpn provide the access for URL configuration in the clients?
I love your videos, they've been very helpful. But whatever those first few words you say are - I cannot figure out.
Hi I am wondering about transfer bandwidth when under VPN, always seems slow n bottlenecks, eg video transfer at 50mbps on a 400 mbps ISP. Any thing I can check n adjust?
I just want make sure I understand correctly if I setup my OpenVPN on my NAS and for example using Synology Photos and setup link were they can download a group of photos they will not be able to do it correct?
Hi, I live in Canada. If I go to the Bahamas and need to access my Synology drive to upload pictures on it (with synology Drive). Will I be able to do that? Or do I need to do the special configurations in this video?
My OpenVPN server is on a TP Link router, and the setup is the same, the VPN client connection works, I can see everything on the LAN (assuming firewall is turned off on the target machine), but I can't access my NAS (Zyxel NAS326). That NAS doesn't have a firewall either, or at least it's not configurable. Any tips?
To anyone having problems, I needed to allow the port through my windows firewall too.