NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

littomalt's avatar
littomalt
Aspirant
May 29, 2019

Mount a share like a drive on WAN side

Hi

 

I am running OS6.10.1 on my Ultra 6+ and struggle to find how to mount a share as a drive when I'm in my office (WAN side of NAS).

I have success with readyCLOUD but then files are only reached from a WEB GUI + I can sync folders.

Sync folders are not an option sinse the drive I need to see at work is like 2-4 Tbyte, much more than my HDD.

 

This drive will be used by up to 5 persons.

I have looked at iSCS, but I have understanding that iSCSI is not the best way, and also it can crash/destroy data it more than one user tries to open same file (wich happens sometimes when we colaborate)

I have a pfsense router and NAT/portforward is no problem to set up.

 

Anybody who can share the recepy?

 

Thanks up front!

 

I also prefer not to set up VPN, but if that is only option to reach shares on WAN side I can do it.

 

 

 

 

15 Replies

Replies have been turned off for this discussion
  • StephenB's avatar
    StephenB
    Guru - Experienced User

    littomalt wrote:

    I also prefer not to set up VPN, but if that is only option to reach shares on WAN side I can do it.

     


    It's not the only option, but it's the only secure option for accessing shares with SMB.  Several folks here who had SMB access enabled over the WAN (some accidentally) recently got hit with ransomware on their public shares.

     

    One aspect is that SMB is all-or-nothing.  You can't set up remote SMB access for some shares, but block it for others.

     

    Some other things you could do:

    • Enable FTPS for some shares, and access with FileZilla or WinSCP. That is secure.
    • Set up WebDav for a share, and install a WebDav client.  That runs over http, so you'd need to enable remote HTTP/S access for the NAS

    Personally I'd go with the VPN (first choice) or FTPS (second choice).  There's not much out there for WebDAV, and you'd end up enabling remote access to the admin web ui if you enable HTTPS.

    • littomalt's avatar
      littomalt
      Aspirant

      StephenB wrote:

      littomalt wrote:

      I also prefer not to set up VPN, but if that is only option to reach shares on WAN side I can do it.

       


      It's not the only option, but it's the only secure option for accessing shares with SMB.  Several folks here who had SMB access enabled over the WAN (some accidentally) recently got hit with ransomware on their public shares.


       

      StephenB, you are Gold.

      I will then dismiss SMB, and try VPN.

       

      I have never done anything with VPN, so this will be a challange...

       

      I see that Readynas offers HOB VPN, i installed it, and ther it came, a lot of configuration... help!

      Btw, is there options to HOB VPN?

       

      Is there some good dokumentation to find? 

       

       

      • StephenB's avatar
        StephenB
        Guru - Experienced User

        littomalt wrote:

        Btw, is there options to HOB VPN?

         


        There is an old VPN server app on apps.readynas.com also - that is based on softether - https://www.softether.org/4-docs/2-howto

        There's also ZeroTier - though at the moment you can't install that on a NAS running 6.10.x.

         

        Personally I use OpenVPN (which is built into my Orbi router).  That gives me full access to my home network when I'm away from home. See if your router supports it - it's the simplest way to go, and avoids the configuration headaches.

         

        I've also tried out ZeroTier - but I ran it on a PC, not the NAS.

         

         


        littomalt wrote:

        I see that Readynas offers HOB VPN, i installed it, and ther it came, a lot of configuration... help!

         

        Is there some good dokumentation to find? 

         


        I haven't used HOB, and unfortunately my German isn't up to finding stuff on their website.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More