Setting up Synology L2TP VPN with UniFi USG

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Setting up Synology L2TP VPN with UniFi USG

sonyxperiageek

2959 posts

Uber Geek

Trusted

#215417 26-Jun-2017 18:05

Hi guys, I've been trying to set up my Synology NAS to do L2TP VPN but can't seem to get the ports open for L2TP VPN on the Unifi USG. Basically, I've been into the Port Forward properties of the USG under the Configuration tab and configured the port forwards as such:

And my WAN IN Firewall page looks like this:

Yet when I go to canyouseeme.org, ports 500, 1701, and 4500 are not open according to it.

I believe I have set up the VPN correctly on the Synology NAS because if I connect to the VPN on Windows 10 via its internal IP address, it connects just fine. I am trying to connect to the VPN via its DDNS name externally.

Any help appreciated thanks!

Sony

sonyxperiageek

2959 posts

Uber Geek

Trusted

#1807964 27-Jun-2017 23:22

Anybody please?

Sony

michaelmurfy

meow
13260 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1807967 28-Jun-2017 00:05

Looks correct to me however I suspect the USG may be interfering with the traffic seeing it too can run a VPN server. How about running it on the USG itself and using Radius to provision users?

You'll need to enable RADIUS on the USG or run this on the Synology (either way works - the USG is likely easier). The USG will however only do 10Mbit over its VPN.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

kyhwana2

2566 posts

Uber Geek

#1807969 28-Jun-2017 00:07

Are you sure your ISP is assigning you a public IP address on your WAN side?

Otherwise enable logging on the USG firewall and your VPN endpoint and see where the packets are getting to/if there are any errors popping up anywhere?

ANglEAUT

2326 posts

Uber Geek

Trusted

Lifetime subscriber

#1807973 28-Jun-2017 00:17

Are you sure about your TCP & UDP protocol selection for the ports?

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

sonyxperiageek

2959 posts

Uber Geek

Trusted

#1808225 28-Jun-2017 14:02

@michaelmurfy I'm still on controller version 5.4.x so it doesn't have the GUI for setting up a VPN yet. How stable is version 5.5.x?

@kyhwana2 Yes, should be. I'm with Slingshot. I used to be able to connect to the exact same setup (or at least I think it's the exact same setup), until I connected to an external VPN from my Synology NAS. So I disconnected from it, and now it doesn't work. DDNS is also set up on the Synology with my updated public IP address.

@IcI I've got it to open UDP ports, which I'm sure is what L2TP needs.

Sony

michaelmurfy

meow
13260 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1808274 28-Jun-2017 15:06

I'm running it on the GZ controller if that answers your question :) it is a stable candidate.

sonyxperiageek

2959 posts

Uber Geek

Trusted

#1808462 28-Jun-2017 19:35

Do you know when it will be officially released?

Sony

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

sonyxperiageek

2959 posts

Uber Geek

Trusted

#1808469 28-Jun-2017 19:42

Also, why will the USG only do 10Mbit over VPN?

Sony

michaelmurfy

meow
13260 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1808481 28-Jun-2017 20:02

sonyxperiageek:

Do you know when it will be officially released?

Standard Ubiquiti style - when they get around to it. I normally use stable candidates as they're still considered stable but under active development. The official "stable" builds are quite old.

sonyxperiageek:

Also, why will the USG only do 10Mbit over VPN?

It is not offloaded - handled by the processor instead.

sonyxperiageek

2959 posts

Uber Geek

Trusted

#1808484 28-Jun-2017 20:06

michaelmurfy:

sonyxperiageek:

Also, why will the USG only do 10Mbit over VPN?

It is not offloaded - handled by the processor instead.

Ah, wonder if the Synology will do more than 10Mbit...

Sony