NordVPN on NAS for entire LAN

[wwwampy]

Hi,

I have a Nord VPN subscription and I would like to set it up on my NAS to work for my entire LAN, like a gateway for the internet.

I'm not sure how to do it exactly and would need some guidance.

Thank you.

 

[Rusty]

I have it running like that.

The idea is to create a vpn profile (in Network section), connect using a specific openvpn file (for example) to a specific Nord server and create a valid connection.

After you connect to nord you can use your NAS IP address as a gateway for all your LAN devices. They will all then use your NAS vpn tunnel as a point before leaving your LAN and hitting the Internet.

That's it, nothing much to it.

 

[wwwampy]

The idea is to create a vpn profile (in Network section), connect using a specific openvpn file (for example) to a specific Nord server and create a valid connection.

Ok, so I create a VPN profile here:

Select OpenVPN or OpenVPN (via importing a .ovpn file)?

If with file, where do I get that file and the NordVPN server address?

After you connect to nord you can use your NAS IP address as a gateway for all your LAN devices.

And where can I set this?

 

[Rusty]

Select OpenVPN or OpenVPN (via importing a .ovpn file)?

If with file, where do I get that file and the NordVPN server address?

Via import. Log into your Nord account, and then go into the list of servers pick one and download the OVPN file

And where can I set this?

depending on the operating system it will vary.
In macOS, it’s in system preferences networking, you will see a gateway field that you need to edit with your correct NASIP address.
if it’s an iOS device, then you’re going to settings Wi-Fi click the exclamation logo and change the router setting.

in the windows operating system, go to network settings and change the adapter properties under IPV4. The exact setting you’re looking here is gateway, change it to your NASIP address.

 

[fredbert]

Normally set by DHCP in home LANs to be the Internet router's LAN IP. In general, it's the next-hop router for off-subnet IPs.

 

[WST16]

Why don’t you run DDSM in Docker and make it your VPN gateway.
@Rusty suggested it to me and I’m very happy with the solution. See this thread. You might find it helpful.

 

[Rusty]

DDSM is end of life and his NAS cant run vdsm.

 

[Telos]

If I set the VPN as "Use default gateway on remote network " ... how do I prevent the NAS from connecting outside my LAN when VPN connection breaks... And is there an alerting system for that eventuality?

 

[wwwampy]

@WST16 Thank you for your suggestion, but as Rusty said, my NAS can't run vdsm.

@Rusty Thanks, it's been a long day and I'll try to set it up tomorrow and come back with new pack of questions.

 

[akahan]

@Telos, in your router's firewall, you can block all outbound connections from the NAS to any address other than the VPN server.

 

[BobW]

Don’t forget to set NordVPN DNS servers in your network preferences to prevent DNS leak.
NordVPN DNS:
103.86.96.100
103.86.99.100

How to set up VPN on Synology 6.1 NAS | NordVPN Support

This is a tutorial on how to set up NordVPN on a Synology DiskStation Manager version 6.1 and later.

support.nordvpn.com

Live Chat, VPN Setup, Troubleshooting | NordVPN Customer Support

NordVPN Customer Support

support.nordvpn.com

You could configure DHCP with the gateway of your NAS. And then let it distribute the addresses to the various clients. You would prevent a client from going outside the VPN.

And if you have a device that doesn't need to go through the vpn. Then you can set it up manually or you can also do that via the DNS Server of the NAS with views.

 

[Telos]

@Telos, in your router's firewall, you can block all outbound connections from the NAS to any address other than the VPN server.

Thanks. I'll give that a go.

 

[WST16]

@WST16 Thank you for your suggestion, but as Rusty said, my NAS can't run vdsm.

I overlooked that

 

[dblndr]

Also consider reading these articles before trusting Nord..

How is NordVPN unblocking Disney+?

NordVPN, a company reeling from careless security practices revealed as part of a security breach (one that they covered up for 6 months…

medium.com

Popular VPN service NordVPN confirms data center breach

Hackers in 2018 accessed a lone server in Finland.

www.cnet.com