OpenVPN Server on Synology NAS | Build Your Own VPN Server | Connect from anywhere!!

so welcome back to the channel everyone tripling here today i wanted to show you how to set up your own vpn server using your synology nas now if you guys are new to the channel i have reviewed a couple synology products in the past couple network test stores as well as their router and amazing products guys work really well but the best thing about synology is that their user interface is simple so just looking at the dashboard here i have my plex server running office i have my mb server i also have cloud stations which basically is a server that you can use to automatically back up your photos and you can use file sharing very cool application as well and i'll try to link all those videos in the description but today we're talking about setting up a vpn server in this scenario guys what this will allow you to do is connect back to your house no matter where you are so essentially if you're on the road and you want to access those resources at your house you can simply vpn in see those resources see those shares see those cameras talk to that file sharing and this will also be great if you own a business guy so imagine having your employees just have a place that they can connect to that way you guys can view the same file you can kind of collaborate on on many things just have them connect back to the vpn server access the resource and that way everyone's on the same page so before we jump into it just know that we have a couple different protocols that we can choose from so just a quick overview of what's available and i'll go ahead and leave the link to this page as well where you guys can go ahead and read more in depth of which protocol is going to work best for you so we have pptp l2tp slash ipsec openvpn and we also have chameleon so take a quick look you can see the supported applications here vpn security is going to be a big one guys so you can see right here pptp is has basic encryption when we get to lttp slash ipsec has a high encryption does check data integrity and encapsulate the data twice as far as openvpn is going to have the high security authenticates data with digital certificate so security is one thing you want to look at we also want to look at the speed pptp is going to be the fastest however that doesn't mean that it's the best so it is the fastest due to the lower security so security is not a big thing to you you might want to consider using pptp now ltp2 ip6 does require more cpu to process an and openvpn is going to have the best performance uh it's going to have fast speeds even on connections with high latency across great distances so between the three options we're going to have on synology today i'm going to do the open vpn setup now if you guys uh want me to do the pptp i will go ahead and do so if you want me to do l2 tp i will go ahead and do that just drop your comments in the comment section and let me know all right let's go ahead and jump into the setup so the application we're going to be using is vpn server and this can be found in your synology package center guys so if you guys are new to synology you go ahead and go to your packet center and right here you just search for vpn and it should pop up so there it is right there click install and it should be good to go so once you have it installed go ahead and launch vpn server all right so this is going to be the basic setup like i said you have three basic options there guys you have pptp openvpn and l2tp slash ipsec like i said the one that we're gonna be working with today is gonna be openvpn so we're gonna go down here we're gonna select openvpn and we're just gonna go ahead and enable it so you can see here now you have a couple options so you do have the dynamic ip address we also have the maximum connection numbers this is the amount of people you want to be able to access at the same time so think about it guys if you have a hundred people connected at the same time it's gonna pretty much bog down your system so you want to take this into consideration along with if you're running anything else on your synology nas how this might affect performance so if i'm watching 4k plex videos all day i might want to keep this number as low as possible and also note that this is using port 1194 so just keep that in mind that is the default the protocol for this one we're going to leave it at udp and as far as the encryption like i said you can go ahead and play with it but i'm just going to leave it at aes 256. now very important right here guys if this is not checked to allow clients to access service land and you might lose some of those functionalities like you guys are remoting in or if you just want to do certain things on your network if this is not enabled you might not get those options so definitely recommend turning that on so now that we have everything set up guys we're just going to go ahead and click apply all right pop-up is going to tell us hey make sure you forward in port 1194 so make sure udp 1194 is open so we're going to click ok and we're going to go over and just verify that's open so the good thing about synology's nas is that they actually have a tool that talks your router directly depending on your comfort level if you have them as the easiest way to go through here and do it or you can go to your router and make sure that port is forward it's gonna depend on which router you have so you might have to do a google search or check your router's manual so to do it on the synology nas we're gonna go to our control panel and right now we're in advanced mode so you can switch back and forth to basics so if you only see a couple icons like i'm seeing here you want to switch that to advanced mode and then you should see this so now we're going to click on external access so you can see already have external access but for the router we're going to go to router configuration and now we're just going to go ahead and click setup router and that way it can automatically talk to your router in the future just to apply those ports that we need for it so very useful tool in my opinion and you can see the pop-up that says your upnp router has passed the compatibility test so universal plug-and-play rules basically means that synology should be able to make those requests in our behalf now we're going to hit next and we're going to go ahead and click apply so like i said depending on your router if you're not compatible you might have to go into your router itself and set up the ports that you need for it in the manual should have instructions but if you do a quick google search along with your router model you should be able to pull this up as well so now we're going to go ahead and create that port remember that we need 1194 udp forwarded and let me just pull this over to the side this is the port that we need to forward so we're going to go to create we're going to do a custom port click next and this port might be forwarded already but i'll just go through the process so udp and we're going to 11.94 we're going to do 1194 for both we're going to click apply and we're going to click save all right click ok find the rule so that's one way to add the custom port however if it fails or you just can't get it going that method you can go ahead and go to create now this time if you go to built-in application click next if you go down and you can see right now udp 1194 is an option there so i'll click on that click apply click save it's going to give us that pop-up and you can see that connection came back okay so the next step and this is very important guys you want to make sure that your ip address is static and for most people you're not going to have a static external ip address i unless you're a business or you pay extra for that particular feature so what synology does it creates a url that's particular to your ip address and what it does it updates it constantly guys so every couple minutes he'll check if the ip address change it will go ahead and just apply that setting and that way if the ip address changes it doesn't interrupt your service so to set this up we're going to go to ddns and then you will be brought to a page like this so on the service provider we're going to click on the drop down we're going to select synology now you're going to get to pick a host name so if you want it to be triple m you can go ahead and put that there if you want it to be network nas for all or or a company name for that matter you can go ahead and just select that there the domain name you can either click synology.me hit the drop down you have a couple more options you get to pick your host name so you can essentially name it whatever you want uh unless that name is already taken then you'll have to change it and now we see that we have that setting when we go back and one more thing we need to do and uh if you have a network attached or chances are you already have this set up but you want to make sure that your internal ip address for your nas is set to static and you can do this from the router or you can do it from the synology nas itself so to get to that we're going to go to our control panel i'm going to go down to network then we're going to go to network interface if you click on bond click on edit ipv4 and mine's set to get network configuration automatically i do have this set static on the router but if you don't you can use a manual configuration i'm going to leave this as is but like i said with synology you can set it one way or another so next we want to set up the users that's actually going to be using vpn so to do that we're going to go to control panel i'm going to go to users i'm going to create so the required fields are the name and password so let's go ahead and set those all right so we do have a strong password we're gonna click next all right so we're gonna click next next next and we'll just click apply just to get the account created to verify that we're gonna go back to vpn we're gonna go to privilege and you can see right here and you can see on the james i do have access to all three vpns so now we're gonna need a certificate for james so to get that we're gonna go down to openvpn i'm gonna go to export configuration and it should go ahead and download a zip file for you and the file is right here it's not a large file you want to get that to every computer that's gonna be accessing this vpn so here we are on another computer and i will be connecting to a hotspot later just to test everything out but you can see i have the openvpn zip file right there if i double click on it i have a couple files in here so one file that you have to pay attention to is the vpn config file so let's go ahead and open that with the text editor so you can do a right click we're gonna open and we're just gonna click on more apps and we're gonna use notepad to edit it now one thing we want to change is where it says your server ip address you want to go ahead and delete that and this spot you can either put an external ip address if your ip address is static or if you plan to manage yourself in this case whatever we chose as our host name we can go ahead and use that so for mine i think it was triple m dot synology dot me but it depends what you created so once you have your host name or your ip address in here go ahead and save the changes i'm just going to put mine on my desktop and on the file type you want to go to all and you just want to put dot o vpn want to make sure it has that same extension guys and save it and there's a config file so before we do anything let's go ahead and download openvpn client so we're going to go to the windows we're going to go to the 64-bit installer all right let's go ahead and run it we will see this at the first load guys it says no readable connection profiles found copy the config files to the following location so we're going to use the import option so let's go ahead and exit out of that so the vpn is running but to get it imported we're going to go ahead and hit the arrow and you can see where it says ovpn right there i'm gonna right click all right so we do have two options here settings and port file we're gonna go ahead and import file i'm gonna go to our desktop vpn config open and you can see file imported successfully click ok all right so we go ahead and launch it and now it's asking for the username and password that we created back on the synology and as right so so username was james and i did create a pretty strong password i'm going to go ahead and save the password and click ok we're going to allow access i am connected and you can see it did assign an ip address based on that ip scheme that i chose so my p address for this connection is 10.0 but to truly test this guys i'm going to jump off my home network set up on a hotspot and we're just going to make sure everything is still good to go all right so i am connected you can see i'm connected to my iphone and let's go ahead and we're going to launch openvpn and again guys this is going to show the icon right here in the bottom it does bring up a credential let's go ahead and click ok all right we're going to allow all right so it's going through you can see it is connected guys gives me another ip address and now i should be able to act as i i would be if i'm on the network guys so let's open our file explorer let's go to our networks here we can map a driver see the drive that's available right you can see i am in my network drive this is my nas by the way and i am connected via vpn but also if i wanted to remote into any computer on the network uh given if you know the ip address or the host name so this is a one of my mini pcs so all right you can see found it right away and we'll just give it a second remember guys i am connecting over my phone's network and tmo has been really horrible as of late so everything's up and running looks pretty good and i can just think of a thousand use cases one of the tool that you can use with this is actually on my synology router where you can go in you can set up wake on land so that way you can go in he can remotely power your computer up remotely shut it down and maybe i'll do a video on that just to show you guys how that will work but for me for someone who has a lot of resources on my main computer that i use if i'm away i would love to be able to remote in turn it off when i want to turn it on when i want to one thing i should mention is that for max there is a certificate and maybe like i said i'll do a follow-up video on that but there's a certificate that you can use to make sure you connect it as well so i have reviewed a couple synology products in the past i'll go ahead and link a couple of the network test storages in the description of this video also if you guys have any questions or special requests drop it in the comment section below as always don't forget to like share and subscribe smash your thumbs up as well and i'll catch on the next you

Channel: Triple M

Views: 10,984

Rating: 4.9322033 out of 5

Keywords: Free vpn, openvpn setup, open vpn for widows, vpn 2020, How to make your own vpn, piVPN, Should you make your own VPN, Openvpn, what is vpn, the best vpn, stop using vpn for privacy, nord vpn, ipvanish, DIY VPN Server, sinology vpn setup, NAS VPN setup, create your own vpn server, create your own vpn windows 10, create your own vpn server on aws, create your own vpn for free, create your own vpn at home, create your own vpn server windows 10, create your own vpn android, ddns

Id: YOjrHLnq_wM

Length: 15min 56sec (956 seconds)

Published: Tue Aug 18 2020