Help please - in simple steps. I have tried reading a lot of the forum points, but they don't address the issues in full for me.I have been reading on the BBC website about how they reckon people have too open access to NAS and to lock it down. I can't go to the extreme they suggest of only internal access, but I would like to be more secure. I have tried messing about with the settings but this has led to a mish mash of results.My needs:-1. Access the NAS (read/write) from two PC's, an iPad and an iPhone within the house. - when I switched off Guest or Anonymous, I hit issues as it appears to be inconsistent if it asks for a User. Also, when I put guest back in, I now cannot write (edit) Music tracks on my NAS from iTunes). Do I need to allow access to CIFS and FTP and/or others?2. Away from the home, I want to be able to access my NAS from my iPhone, my iPad and my Work Laptop - but restrict it so that only these machines or named users can do this - I seemd to get this to work on my Work PC and iPad but the iPhone didn't like it. However, this didn't work on my Home PC as said above.3. ReadyNAS Vault still needs it's access for continual backup.4. Basically - I want to be able to do this without opening up more that I have to or username/password protecting.I am on an older NAs (ReadyNAS Duo V2 - I think it is SPARC) so using RAIDiator 4.1.13 Please don't just say you need to configyure X on Y as I may need the instruction on how to configure or where to find that.My PC is Win XP (yes, I now), my Work Laptop is Win 7. I also connect with a Win 8 laptop for backing up

You have a duo v1 (which is a sparc). duo v2 would be arm.Start with getting the LAN to work correctly first.You need CIFS for the two pcs. You can certainly turn off guest access. Create a user account for the PCs to use on the NAS with a password, and then go into the control panel in Windows 7, and run the Windows Credential Manager. Add a "windows credential" for the NAS, using the Nas Name, and user/pass you created on the NAS. Search for "windows credentials manager" for XP and win 8, there is a way to enter those credentials on those OS also.Then go into frontview (the web ui), and select CIFS icon next to each share in the share listing. Then select the "advanced options" tab on the top right. Enter the username you created, and then the group that user was in (likely "USER"). Select "disabled" for "folder everyone rights". Then check the box next to "Set ownership and permission for existing files and folders..." and click apply on the bottom right.Wait for the pop to complete, and then see if you can access that share.How are you accessing the NAS from your iphone and ipad today? ReadyRemote? Or some other way?

This looks very clear, so thank you for that. It may take me a night or two to get the time to try on all machines.With the iPad and iPhone, I use ReadyNAS Remote

Ok. There is no reason to change that setup.You could also use ReadyNAS Remote for the work laptop, or set up ftps. We can circle back to that after you get the LAN working.

Limited success so far. Having done what (I think) you meant, at home I can access the NAS using CIFS on my iPad. My XP machine now does not have the required access and iTunes doesn't see the music files on the NAS. This is quite crucial.For my iPad, I also had Remote working previously, but as you have not yet suggested that part of the setup, I will await that. For my work PC, I was previously using Remote so happy to continue with that.For the XP machine, I have created the credentials as User Accounts as I think that is the equivalent. This may be my issue?

The credentials should be in User accounts (though I no longer run XP...)Try opening a CMD window (dos box) and enternet use * /deletenet use z : \\nasname\sharename /user:usernamewherenasname = name of the NASsharename = NAS shareusername = user credential you entered for NASIt should prompt you for a password.If it succeeds, it will map the Z drive letter to the share. If it fails, post the error here.

Help with SECURE access | NETGEAR Communities

19 Replies

Replies have been turned off for this discussion

StephenB
Guru - Experienced User
Sep 22, 2014
You have a duo v1 (which is a sparc). duo v2 would be arm.

Start with getting the LAN to work correctly first.

You need CIFS for the two pcs. You can certainly turn off guest access. Create a user account for the PCs to use on the NAS with a password, and then go into the control panel in Windows 7, and run the Windows Credential Manager. Add a "windows credential" for the NAS, using the Nas Name, and user/pass you created on the NAS. Search for "windows credentials manager" for XP and win 8, there is a way to enter those credentials on those OS also.

Then go into frontview (the web ui), and select CIFS icon next to each share in the share listing. Then select the "advanced options" tab on the top right. Enter the username you created, and then the group that user was in (likely "USER"). Select "disabled" for "folder everyone rights". Then check the box next to "Set ownership and permission for existing files and folders..." and click apply on the bottom right.

Wait for the pop to complete, and then see if you can access that share.

How are you accessing the NAS from your iphone and ipad today? ReadyRemote? Or some other way?
Pistolpete11
Aspirant
Sep 22, 2014
This looks very clear, so thank you for that. It may take me a night or two to get the time to try on all machines.

With the iPad and iPhone, I use ReadyNAS Remote
StephenB
Guru - Experienced User
Sep 22, 2014
Ok. There is no reason to change that setup.

You could also use ReadyNAS Remote for the work laptop, or set up ftps. We can circle back to that after you get the LAN working.
Pistolpete11
Aspirant
Sep 23, 2014
Limited success so far. Having done what (I think) you meant, at home I can access the NAS using CIFS on my iPad. My XP machine now does not have the required access and iTunes doesn't see the music files on the NAS. This is quite crucial.

For my iPad, I also had Remote working previously, but as you have not yet suggested that part of the setup, I will await that. For my work PC, I was previously using Remote so happy to continue with that.

For the XP machine, I have created the credentials as User Accounts as I think that is the equivalent. This may be my issue?
StephenB
Guru - Experienced User
Sep 23, 2014
The credentials should be in User accounts (though I no longer run XP...)

Try opening a CMD window (dos box) and enter

net use * /delete
net use z : \\nasname\sharename /user:username
where
nasname = name of the NAS
sharename = NAS share
username = user credential you entered for NAS

It should prompt you for a password.

If it succeeds, it will map the Z drive letter to the share. If it fails, post the error here.
Pistolpete11
Aspirant
Sep 24, 2014
If you are online now, it would be great. NASname seems to be the issue. When I try the cod you suggest, I get System Error 67. the network name cannot be found.
I have tried the name that I see, and IP address to no avail
Pistolpete11
Aspirant
Sep 24, 2014
OK, hold the bus. I went back through and tidied it up and I can now use File Browser on my iPad, Windows Explorer on Xp and iTunes with full write access. The part about net use still doesn't work, but does that matter now?

Nothing on the Remote side is working yet, so if you can move on to that I would appreciate it.
Also, I need to be sure that the ReadyNas Vault will still have the necessary access
StephenB
Guru - Experienced User
Sep 24, 2014
Well, net use should work, but if you are browsing the NAS with windows file explorer it doesn't matter.

Are you saying ReadyNAS remote is not working any more?
Pistolpete11
Aspirant
Sep 24, 2014
Correct. Both my iPhone & IPad get the same result - it appears to connect ok in terms of user name, but does not offer up any shares
StephenB
Guru - Experienced User
Sep 24, 2014
What about the work PC?