NordVPN on NAS for entire LAN

Currently reading
NordVPN on NAS for entire LAN

363
94
NAS
DS418play
Router
  1. RT2600ac
  2. MR2200ac
Operating system
  1. macOS
  2. Windows
Mobile operating system
  1. iOS
Hi,

I have a Nord VPN subscription and I would like to set it up on my NAS to work for my entire LAN, like a gateway for the internet.

I'm not sure how to do it exactly and would need some guidance.

Thank you.
 

Rusty

Moderator
NAS Support
4,642
1,338
www.blackvoid.club
NAS
DS718+, DS918+, 2x RS3614RPxs+
Router
  1. RT1900ac
  2. RT2600ac
  3. MR2200ac
Operating system
  1. macOS
Mobile operating system
  1. iOS
I have it running like that.

The idea is to create a vpn profile (in Network section), connect using a specific openvpn file (for example) to a specific Nord server and create a valid connection.

After you connect to nord you can use your NAS IP address as a gateway for all your LAN devices. They will all then use your NAS vpn tunnel as a point before leaving your LAN and hitting the Internet.

That's it, nothing much to it.
 
363
94
NAS
DS418play
Router
  1. RT2600ac
  2. MR2200ac
Operating system
  1. macOS
  2. Windows
Mobile operating system
  1. iOS
The idea is to create a vpn profile (in Network section), connect using a specific openvpn file (for example) to a specific Nord server and create a valid connection.
Ok, so I create a VPN profile here:

Screenshot 2019-12-13 at 09.26.02.png



Select OpenVPN or OpenVPN (via importing a .ovpn file)?

If with file, where do I get that file and the NordVPN server address?



After you connect to nord you can use your NAS IP address as a gateway for all your LAN devices.
And where can I set this?
 

Rusty

Moderator
NAS Support
4,642
1,338
www.blackvoid.club
NAS
DS718+, DS918+, 2x RS3614RPxs+
Router
  1. RT1900ac
  2. RT2600ac
  3. MR2200ac
Operating system
  1. macOS
Mobile operating system
  1. iOS
Select OpenVPN or OpenVPN (via importing a .ovpn file)?

If with file, where do I get that file and the NordVPN server address?
Via import. Log into your Nord account, and then go into the list of servers pick one and download the OVPN file
And where can I set this?
depending on the operating system it will vary.
In macOS, it’s in system preferences networking, you will see a gateway field that you need to edit with your correct NASIP address.
if it’s an iOS device, then you’re going to settings Wi-Fi click the exclamation logo and change the router setting.

in the windows operating system, go to network settings and change the adapter properties under IPV4. The exact setting you’re looking here is gateway, change it to your NASIP address.
 

fredbert

Moderator
NAS Support
Subscriber
3,142
1,249
NAS
DS1520+, DS218+, DS215j
Router
  1. RT2600ac
  2. MR2200ac
Operating system
  1. macOS
Mobile operating system
  1. iOS
Normally set by DHCP in home LANs to be the Internet router's LAN IP. In general, it's the next-hop router for off-subnet IPs.
 
2,092
888
NAS
DS220+ : DS1019+ : DS216+II : DS118 : DS120j : APC Back UPS ES 700 — Mac/iOS user
Why don’t you run DDSM in Docker and make it your VPN gateway.
@Rusty suggested it to me and I’m very happy with the solution. See this thread. You might find it helpful.
 

Rusty

Moderator
NAS Support
4,642
1,338
www.blackvoid.club
NAS
DS718+, DS918+, 2x RS3614RPxs+
Router
  1. RT1900ac
  2. RT2600ac
  3. MR2200ac
Operating system
  1. macOS
Mobile operating system
  1. iOS
DDSM is end of life and his NAS cant run vdsm.
 

Telos

Subscriber
2,023
670
NAS
DS418play, DS213j, DS3622+, DSM 7.1.4-11091
If I set the VPN as "Use default gateway on remote network " ... how do I prevent the NAS from connecting outside my LAN when VPN connection breaks... And is there an alerting system for that eventuality?
 
363
94
NAS
DS418play
Router
  1. RT2600ac
  2. MR2200ac
Operating system
  1. macOS
  2. Windows
Mobile operating system
  1. iOS
@WST16 Thank you for your suggestion, but as Rusty said, my NAS can't run vdsm.

@Rusty Thanks, it's been a long day and I'll try to set it up tomorrow and come back with new pack of questions.
 
390
159
NAS
DS212J, DS214play, DS216, DS216play, DS414, DS918+, RS816
Router
  1. RT2600ac
  2. MR2200ac
Operating system
  1. Windows
Mobile operating system
  1. iOS
@Telos, in your router's firewall, you can block all outbound connections from the NAS to any address other than the VPN server.
 
178
41
Last edited:
Don’t forget to set NordVPN DNS servers in your network preferences to prevent DNS leak.
NordVPN DNS:
103.86.96.100
103.86.99.100



You could configure DHCP with the gateway of your NAS. And then let it distribute the addresses to the various clients. You would prevent a client from going outside the VPN.

And if you have a device that doesn't need to go through the vpn. Then you can set it up manually or you can also do that via the DNS Server of the NAS with views.
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Similar threads

xxx.synology.me is my server name. I use reverse proxy only for my docker services that are on my own...
Replies
13
Views
1,872
  • Question
Seeing that I found reference to a security flaw in the units I was trying, and at MFG's website there is...
Replies
6
Views
397
  • Question
Yeah I thought as much on the first. :) Turns out it looks like I have a user issue somehow. If I use my...
Replies
4
Views
300

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Trending threads

Top