Originally Posted by
Dubai Stu
I have a dual NIC QNAP NAS but wasn't able to get the VPN to connect to my home (or outside network). I could VPN into the NAS just fine and access the files on it, but I couldn't get it to relay/bind with the other network connection.
I looked on the QNAP forum and saw others complaining about the same lack of this feature and assume it wasn't possible (absent serious hacking of the device). If I'm wrong, please let me know. One less device is always better.
While my QNAP NAS has dual NICs, I'm effectively only using one Ethernet port on it, because I don't see how it makes any difference in my small home setup (just 1 router only, and a few PCs).
My QNAP OpenVPN settings page looks like this:
I believe, the VPN client IP pool must *not* be in the same subnet as the LAN IP pool (eg: Lan is 192.168.1.xxx; VPN is 10.18.0.xxx).
My .ovpn config file to connect to my home VPN looks like this:
Code:
client
dev tun
script-security 3
proto udp
remote dynamicdns.example.com 1194
resolv-retry infinite
nobind
reneg-sec 0
cipher AES-256-CBC
comp-lzo
auth-user-pass credentials.txt
setenv CLIENT_CERT 0
<ca>
-----BEGIN CERTIFICATE-----
(bunch of gibberish characters live here)
-----END CERTIFICATE-----
</ca>
credentials.txt is a simple text file with the username on the first line, and password on the second, kept in the same directory as the .opvn file.
And of course, my router has the correct port forwarding to the NAS internal ip address.
When I'm out and about, I can VPN home, and access the files on my NAS, as well as surf the net and do everything else normally. whatismyip.com shows my ip address as coming from my home system.
I don't remember right now, but it may not be possible to connect to the VPN while you are connected on your internal network at home... (eg: if you're at home, and connected to the internet by your home router).
Edited to add: I believe what they would like to do, is have incoming OpenVPN connections on ETH1, and 'outgoing' OpenVPN traffic on ETH2. I'm guessing if you could set this up, it might give you slightly better performance; but on the whole, I didn't care to make that happen, as I believe my main bottlenecks were the speed of my home internet connection, and my router itself...