Strange behavior using VPN client and remote VPN access DSM 7

Currently reading
Strange behavior using VPN client and remote VPN access DSM 7

16
3
NAS
DS1821+
Operating system
  1. Windows
Mobile operating system
  1. Android
I am remote accessing my 1821+ running DSM7.0.1-42218 Update 2 via a Lan-Lan vpn using two Draytek routers. The requests coming into the 1821 from the VPM come in as subnet 192.168.1.x. The Diskstation is on subnet 192.168.0.x. The network address of the 1821+ is 192.168.0.252, subnet mask is 255.255.255.0, gateway is 192.168.0.1 (the router).

I set up a vpn client on the 1821+ through the Control Panel->Network tab->Network Interface. I point to NordVPN and I can connect and disconnect just fine.

When I connect the vpn client (and the client connects), I cannot remotely access the 1821+ from the VPN. I cannot even log into the 1821+ with a browser. I can access the 1821+ from anything on the 192.168.0.x subnet. I cannot access the 1821+ from any device on the 192.168.1.x subnet.

When I disconnect the vpn client on the 1821+, I can remotely access the 1821+ perfectly, and can log into the 1821+ via a browser. In fact, any device on the subnet 192.168.1.x can access the 1821+.

It seems like the connected vpn client is somehow causing the diskstation to ignore requests from subnet 192.168.1.x.

This worked fine under DSM 6. When I connected the vpn client, I could point my gateway address to the 1821+, I would be routing my traffic through the VPN, not directly over the Internet.

Does anyone know what is going on and how to fix it?
 
Does anyone know what is going on and how to fix it?
Are you sure that while you have a running VPN towards Nord (that doesnt port forward anything back), you also have a firewall rule allowing your subnet 1 devices to be able to access your subnet 0 range?
 
Last edited:
Shouldn't the subnet mask be 255.255.254.0 ?
IP subnet 192.168.0.0
Subnet Mask 255.255.254.0
Allows access from 192.168.0.0 - 192.168.1.254
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Similar threads

  • Question
Just thought about another location to change IP if you have a specific app NAS control panel - Login...
Replies
1
Views
485
Yes, I access it with my PC I already did setup it before and working fine, just recently I changed...
Replies
4
Views
778
  • Question
I'm not sure when this started but I am unable to connect to my NAS when outside of my home wifi using...
Replies
0
Views
1,434
  • Question
If you don't use a split tunnel VPN, then all IP traffic will go through the VPN gateway, instead of only...
Replies
2
Views
2,120
Well opening locally and remotely are 2 different scenarios as well as the protocol being used. Try and...
Replies
11
Views
3,109

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Back
Top