Need some Friday advise on VPN server please :)

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Need some Friday advise on VPN server please :)

iamsammajor

366 posts

Ultimate Geek

Lifetime subscriber

#251361 21-Jun-2019 13:22

Hello everyone,

It is me again asking for some Friday advises, this time is on VPN server.

Devices inside the house,

3 x PC
1 x ERL
1 x UAP ac pro
1 x NAS
1 x home hub.

current set up,

UAP ac pro is linked to online controller, so I am already able to control it over the phone.
NAS has remote access through Synology's website.
If i want to access my router change the setting on my network, i would need to connect to my NAS through Synology's web, login in remotely, connect to the VM then launch browser, change the setting.

what I want to achieve,

set up a VPN server, connect to it when i need to access my network, and do the changes, this would allow me to change without a computer?

Issue i'm having,

Synology has VPN server app, but I didnt have any luck in setting it up or keep it being usable.
Too many webpages need to be open to do the changes.
Changes require access to a PC.

Question,

Can I setup up a VPN server in the VM on NAS, would this work better than the VPN server app?
Can I use ERL as a VPN server, would this be a better option?

Thank you for your time :)

Sam

nbroad

320 posts

Ultimate Geek

#2261972 21-Jun-2019 14:38

Hi,

I have the OpenVPN server running on a Synology NAS and it works great. I'd say this is the easiest setup so personally I would continue trying to sort that one out.

You can run a VPN server on the ERL, but the setup may be a bit more complex than the Synology solution:

https://help.ubnt.com/hc/en-us/articles/204950294-EdgeRouter-L2TP-IPsec-VPN-Server

Cheers

AliExpress

Shop now on AliExpress (affiliate link).

cyril7

9049 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2261974 21-Jun-2019 14:45

I just have a port forward to the NAS on port 5002 (which is Synologys default for SSH), you can enable auto blocking to prevent brute force attempts, that under Security > Account > Autoblock.

Once you have SSH into your network then you just SSH to other devices and do what you need to, you can also use Port tunneling over SSH and give youself web access to other devices.

SSH with tunneling is a bit of a poor mans VPN, but its effective and easy to use, all you need is putty (or bash if on *nix) and the above port forward and your done.

Cyril

Handle9

11118 posts

Uber Geek

Trusted

Lifetime subscriber

#2261977 21-Jun-2019 14:53

nbroad:
Hi,

I have the OpenVPN server running on a Synology NAS and it works great. I'd say this is the easiest setup so personally I would continue trying to sort that one out.

You can run a VPN server on the ERL, but the setup may be a bit more complex than the Synology solution:

https://help.ubnt.com/hc/en-us/articles/204950294-EdgeRouter-L2TP-IPsec-VPN-Server

Cheers

This is what I did. It's pretty straightforward.

iamsammajor

366 posts

Ultimate Geek

Lifetime subscriber

#2263434 24-Jun-2019 14:36

Handle9:
nbroad:

Hi,

I have the OpenVPN server running on a Synology NAS and it works great. I'd say this is the easiest setup so personally I would continue trying to sort that one out.

You can run a VPN server on the ERL, but the setup may be a bit more complex than the Synology solution:

https://help.ubnt.com/hc/en-us/articles/204950294-EdgeRouter-L2TP-IPsec-VPN-Server

Cheers

This is what I did. It's pretty straightforward.

Did you do anything else apart from set up in Synology Nas VPN Server app and then the port forwarding in router?

nbroad

320 posts

Ultimate Geek

#2263439 24-Jun-2019 14:44

Pretty sure that’s all I did.
I used OpenVPN.
Export the config files and import them into OpenVPN client on PC, Android, iOS.

Cheers

iamsammajor

366 posts

Ultimate Geek

Lifetime subscriber

#2263465 24-Jun-2019 15:05

nbroad: Pretty sure that’s all I did.
I used OpenVPN.
Export the config files and import them into OpenVPN client on PC, Android, iOS.

Cheers

thanks for getting back to me :)

I tried, no luck, did you set up DDNS on your NAS? or anywhere in your network?

Spyware

3719 posts

Uber Geek

Lifetime subscriber

#2263541 24-Jun-2019 16:53

Surely you can test VPN circuit using the current public address. DDNS is just a trivial detail. And if a non functioning DDNS is the cause of your problems then maybe get a static address or implement using ddclient under Unbuntu on an RPi (which does work).

djtOtago

1127 posts

Uber Geek

#2263542 24-Jun-2019 16:59

Who is your ISP.

Do you know if your IP address is public?

Or does your ISP put you behind CGNAT?

iamsammajor

366 posts

Ultimate Geek

Lifetime subscriber

#2263554 24-Jun-2019 17:30

djtOtago:

Who is your ISP.

Do you know if your IP address is public?

Or does your ISP put you behind CGNAT?

only question I am able to answer is that 2degree is my ISP

djtOtago

1127 posts

Uber Geek

#2263559 24-Jun-2019 17:55

I believe 2degrees don't use CGNAT so your ip address will be public and open.

So in theory setting up a VPN server on your Synology NAS and making sure the ERL is forwarding the correct port should work.

nbroad

320 posts

Ultimate Geek

#2263613 24-Jun-2019 19:57

Have you followed the OpenVPN client instructions here:
https://www.synology.com/en-global/knowledgebase/DSM/tutorial/Network/How_to_connect_to_Synology_s_VPN_Server_using_a_Windows_PC_or_Mac

You need to edit the config file and put your public IP address in there.
Once you have it tested and working, you can setup a DDNS service and use that new host name instead of your IP address.

iamsammajor

366 posts

Ultimate Geek

Lifetime subscriber

#2263705 25-Jun-2019 06:57

nbroad: Have you followed the OpenVPN client instructions here:
https://www.synology.com/en-global/knowledgebase/DSM/tutorial/Network/How_to_connect_to_Synology_s_VPN_Server_using_a_Windows_PC_or_Mac

You need to edit the config file and put your public IP address in there.
Once you have it tested and working, you can setup a DDNS service and use that new host name instead of your IP address.

Yes, you are correct, and it worked.

silly me thinking if I download the settings, it should have been configured for me,

it works well now :)

thank you every one :)