Creating a Snapshot Replication - Failed to authenticate the destination server?

[NAS Newbie]

I'm trying to set up snapshot replication to backup my laptop Activebackups from my local NAS to an offsite NAS.

Currently, both NAS are on the same LAN as I'm trying to do the first initial large backups on my LAN before moving the 2nd NAS offsite.

I have Snapshot Replication installed on the destination NAS. I wanted to make sure that the username I was going to use in SR to login to the destination NAS had user permissions for SR in the destination NAS, but SR does not show up in the application list.

Anyways, I have created a snapshot. When I try to create a replicate task pointing to the 2nd NAS, I get an error saying that it failed to authenticate the destination server. What am I doing wrong?

 

[WST16]

Check the firewall. Allow SR port.

 

[Rusty]

What am I doing wrong?

A user on the destination side doesn't have to be the same one as your source side. As long as it is an administrator rank user it will work.

Considering that you can't use a custom port for SR other than 5566/TCP there could be a problem with your DSM port/account. If they are both in the same network, network communication shouldn't be a problem, unless you have it locked down on a firewall end as @WST16 said.

 

[NAS Newbie]

I wasn't using an admin-level user. A couple add-on questions:

1. I have 2FA set up on the admin user on the 2nd NAS. how does that work with Replicate?
2. Snapshot is to save a local snapshot (takes snapshot of local nas, saves snapshot to same nas) while Replicate takes a snapshot of local nas and saves it to remote nas? Do I need to have a snapshot task in order to have a replicate task? I'm thinking the 2 features are not tied together?

-- post merged: 28. Dec 2020 --

3. how do I set replicate up for a truly remote connection once I do the initial backup on my LAN? Once I move the 2nd NAS to the remote LAN, do I need to port-forward 5566 to the 2nd nas, or can I set up reverse proxy for replicate somehow? Not sure exactly how it works when its asking for both a dsm port and the replicate 5566 port. I will be setting up the 2nd nas with reverse proxy on the remote LAN so that I'll have something like dsm2.nas2.synology.me. Is that all I need to point the replicate IP address towards, or will I need a replicate-specific RP somehow?

 

[WST16]

I don’t have an answer, but clarify one thing please, what is “remote”?
In your first post you said offsite (that’s why I mentioned the firewall).
Now you’re saying dsm2.nas2.synology.me, is this the same one we worked with before? It’s on the same subnet, isn’t it?

 

[NAS Newbie]

I don’t have an answer, but clarify one thing please, what is “remote”?
In your first post you said offsite (that’s why I mentioned the firewall).
Now you’re saying dsm2.nas2.synology.me, is this the same one we worked with before? It’s on the same subnet, isn’t it?

I'm trying to set up the network below. For this post, I am trying to complete the legs that are circled. For the initial setup, I'm backing up all the NAS on my LAN so that I'm not trying to upload everything over the internet because my upload speed sucks. Once I do the first initial backup, then I'll migrate the DS220+ to my dad's LAN. Remote/offsite backup is the end goal. re-reading my post, I should have clarified that the first line about offsite NAS was the end-goal; both NAS are currently on-site.

For the 3rd question, what I'm trying to figure out is what I need the destination address to be in Replicate on the RS1219+ on my LAN so that it can talk to the DS220+ once it is migrated to dad's LAN. I have them talking right now when both are on the same LAN and want to know what I need to set up prior to or after moving the DS220+ offsite.

 

[WST16]

I see. So it’s going to be offsite.

Have you considered connecting the two houses together over fiber? Media converter boxes are cheap. I mean if it’s beneficial on the long run. If it’s for backup, I wouldn’t bother.
There are pros and cons.

 

[NAS Newbie]

Correct. Eventually.

We are still stuck on DSL out here in the boonies. Dad's new house is in town 4 miles away.

 

[WST16]

Dad's new house is in town 4 miles away.

Oh. That’s far. I was under the impression (from your previous messages) that it’s next door and the only distance in between is farm land.

 

[NAS Newbie]

well, dad's old house (which we now live in) was close to the barn I own. My old house is about a mile away from the house we are in now and almost has line-of-site. I know I had jeyare messed up figuring out which house was which for a while too.

 

[Rusty]

1. I have 2FA set up on the admin user on the 2nd NAS. how does that work with Replicate?

You will need to enter it while setting up a remote replication task

Do I need to have a snapshot task in order to have a replicate task? I'm thinking the 2 features are not tied together?

No there is no need to have a local one. Yes, those are 2 separate options

3. how do I set replicate up for a truly remote connection once I do the initial backup on my LAN? Once I move the 2nd NAS to the remote LAN, do I need to port-forward 5566 to the 2nd nas, or can I set up reverse proxy for replicate somehow? Not sure exactly how it works when its asking for both a dsm port and the replicate 5566 port. I will be setting up the 2nd nas with reverse proxy on the remote LAN so that I'll have something like dsm2.nas2.synology.me. Is that all I need to point the replicate IP address towards, or will I need a replicate-specific RP somehow?

You will need to have 5566 open on the destination side to make this work. Your destination DSM can be RPed to get to the NAS from your source side, but there is nothing you can do about snapshots via RP, just open the port and it will connect once you authenticate on the NAS that will be your target.

 

[NAS Newbie]

You will need to enter it while setting up a remote replication task
View attachment 2678

Yes, i did that. Will I need to continue doing 2fa each time replication runs?

-- post merged: 29. Dec 2020 --

also, just to clarify your comments about the remote access. Will I need to set up an SR-specific RP, or will I be using the DSM RP? If I need an SR-specific RP, how do I go about setting it up? According to the list of synology ports, it uses 3261 for LUN and 5566 for shared folder. You just said that I can't RP 5566, and SR doesn't show up in my application list to tweak any of the application port settings, so I'm guessing it just needs the DSM RP?

 

[Rusty]

Will I need to continue doing 2fa each time replication runs?

No

Will I need to set up an SR-specific RP, or will I be using the DSM RP? If I need an SR-specific RP, how do I go about setting it up? According to the list of synology ports, it uses 3261 for LUN and 5566 for shared folder. You just said that I can't RP 5566, and SR doesn't show up in my application list to tweak any of the application port settings, so I'm guessing it just needs the DSM RP?

Correct. You can't RP Snapshot. Just make sure that the DSM UI is RPed and accessible, authenticate and open 5566 port for replication.

 

[NAS Newbie]

sounds good, thanks again.