Connect to SSL VPN from DiskStation?

Currently reading
Connect to SSL VPN from DiskStation?

148
32
NAS
DS1621+, DS1019+, DS218+
Operating system
  1. Linux
  2. macOS
  3. other
Mobile operating system
  1. iOS
Another VPN question 😊

I recently setup VPN Plus on a RT2600ac router, enabling OpenVPN and Synology's SSL VPN protocols.

I can connect to home via SSL VPN from different computers, iPhones etc. but can't see how to connect a Synology in a different location (for remote backups) to the VPN using SSL VPN.

I've connected that NAS to my home via OpenVPN, but wondering if it's not possible via Synology's SSL VPN?
 
I don't think DSM has a built-in SSL-VPN client, like it has for OpenVPN etc.

SSL-VPN remote access was originally, IIRC, aimed at enabling clientless secure access, meaning: providing there is access to a web browser then there is no need to install VPN clients or configure built-in support. It also has the benefit to add a web portal to access internal services.

Of course there's no reason why SSL-VPN can't be used for site-to-site VPN but Synology will need to add the client to DSM's Network Interface control panel.
 
Right, thanks for clarifying that.

I did notice that if I connect to the SSL VPN on my phone using the VPN Plus app I can access the remote NAS that's connected via OpenVPN, so it's pretty cool that VPN Plus Server on the RT2600ac handles the traffic over the 2 different protocols.

I think I'll leave it as it is for now with both running at the same time.
 
Last edited:
I have the different, more secure, VPN services running in case there is a problem accessing one type from wherever I happen to be.

Regarding SRM site-to-site, it still only supports the same set of VPN technologies than DSM does, i.e. not SSL-VPN. In theory a DSM NAS can be setup as a perimeter device which is probably how we have got SRM. The site-to-site or client-to-site VPN difference is just a matter of LAN(s) access and routing.

I've never played with DSM making VPN client connections, say to another DSM NAS. I assume you need to ensure that the server side doesn't enforce LAN isolation on the client, if it's serving LAN devices.
 
Yeah, I already have the remote NAS (at my parents') connecting to my own NAS at home through the VPN running on the RT2600ac. Working well for remote backups.
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Similar threads

Have you made sure that the Synology firewall has a rule to allow the IP range of the VPN through? ie...
Replies
20
Views
4,922
Ok I thought that port 443 was necessary in order to access the Syno via mac Finder. In this case I close...
Replies
29
Views
6,853
do you have MS-CHAP v2 enabled as the authentication method on the client side?
Replies
20
Views
10,770
  • Question
So you have two sites with identical local IP subnets and even IP assignments? If trying to connect from...
Replies
2
Views
1,053
Did you try to directly connect using the NAS's LAN IP? And that also fails? How exactly are you...
Replies
3
Views
1,542
  • Question
Can't offer any solution, but can you try a different VPN type? OpenVPN? Is your router on the latest...
Replies
2
Views
1,447

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Back
Top