NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
pcpro1
Oct 10, 2017Aspirant
ReadyNAS RNDU4000 Setup Guide ?
I was asked to bring some order in a messy setup on this NAS, RNDU4000, RND-4A Im familiar with other brands, but nor so much with Netgear. One problem I have is that I dont find a file manager, wh...
StephenB
Oct 10, 2017Guru - Experienced User
pcpro1 wrote:
- There is 2 Admins (Bosses) that wants to be able to see all shares and everything thats on the NAS.
- The 2 Admins wants remote access also from home.
I suggest the two Bosses use the the NAS admin account when they want to access the full data volume. The easiest way to handle this is to enter a windows credential in their machines for the NAS-IP address (admin, nas-admin-password), and use the NAS name for their normal login. This is a bit awkward, but the NAS doesn't support more than one admin account with full NAS access.
Remote access will likely need some form of VPN - either in the router, or as a NAS add-on. The router is probably better. The other option is to use FTPS (forwarding appropriate ports in the business firewall) for remote access. The NAS is end-of-life, so you shouldn't assume there will be security updates in the future. So port forwarding does carry some risk.
pcpro1 wrote:
Some shares can be accessed from any computer that logs in to their wifi. Not acceptable.
Thay report that Guest MAC users that connects to their network, can see more on NAS than PC users.
That requires turning anonymous access off (which is the default). If they have a windows shop, then you should also turn off AFP.
pcpro1 wrote:
- Other Users should have their own private folder so save files in.
You have two ways to go here. One is to create a share for each user, and set the network permissions so only that user has access. You could also explicitly give the bosses access to them. Do the same with the existing BOSS shares.
The NAS also supports "private" shares, that have the same name as the user logon. These are not accessible at all by other users (unless you are using admin credentials, and access the data volume using \\nas-ip-address\C ).
Both can be made to work, though backup/restore is simpler if you use shares, and leave the "private" home folders disabled.
pcpro1
Oct 10, 2017Aspirant
OK,
They have already used this setup for a year or so, and have a lot of files on the NAS,
I dont want to loose any of them when reconfiguring.
The two Bosses are abroad for a longer time and want to access everything from there.
At the moment they use Teamviewer to access their own computers, that habe local access to the NAS, but they also want to access the NAS directly.
How do the access the whole file system ?
I logged in as a Boss (Admin), but I dont see any file manager or anything I can use to get a file/folder overwiew.
I couldt find the setting for turning anonymous access off?!
A windows shop ?
Do you mean webshop ?
No, they have not.
What is AFP ?
I couldnt find "private shares" eather, where to find that setting ?
- SandsharkOct 11, 2017Sensei
Assuming this is still runing the original OS (4.2.x) and has not been updated to OS6.x, the user manual is here: ReadyNAS for Business Software manual. It's a bit out of date to the newest software versions and does not list the Ultra models, but not much has changed and most is applicable to the Ultras.
Unfortunately, Netgear is ending the ReadyNAS Remote service that could have been used for remote access to a 4.2.x system. ReadyCloud for OS6.x has limitations regarding multiple admins. But so long as you do not use the built-in home folders, you can give the bosses access to any folder without them being an admin (which may be a good idea if they don't know what to not mess with).
So, some of your options are continuing to use TeamViewer and logging in to the local account via that, implementing a VPN solution (in your router would be the best place for that), or upgrading to OS6.x (which requires completely starting over with new user configurations and backed up data). Even with OS6.x, you might want a VPN solution. But with OS6 being based on a current Debian distro, getting a VPN set up on the NAS itself is a bit easier.
- pcpro1Oct 12, 2017Aspirant
Ok, its 4.2.31
After have discussed this with the bosses, they decided that a VPN is not neccesary at the moment. So I made a dynamic address for them to access the NAS. And made a portrorward in router for this. FTP and HTTP
But what I dont understand is that when going to IP/admin and IP/shares locally, its the same password ? How do I change this ?
Should not be the same password, right ?!
Also accessing the NAs from remote location is now possible to login and view shares
dynamicIPaddress/shares
(At the monent no shares is visible because i deactivated that for http/https)
But if I go to dynamicIPaddress/admin I get only a page error ?!
Why does it work locally, but not via Internet ?
Another thing I dont understand is that all shares are ticked as CFS, but when I browse the network from one of the bosses PCs, 3 folders are public, and the rest needs a password.There are 6 user accounts created on the NAS, all i users group
(Groups are users, bosses, sales, company name)
Boss 1
Boss 2
Employee 1
Employee 2Employee 3
Employee 4
I dont see that any different group have different privilegies in the settings.
So does it really matter what group they are in ?
So standardgroup is set to company name group for new usersPrivate folders are activated
Export privare folders over NFS is deactivated (what happens if I change this?)
Private folders available over FTP is deactivated
Trash for private folders is deactivated
- SandsharkOct 13, 2017Sensei
It is certainnly possible to set up different permissions for different groups and users and to have a different password for admin and other users. It just looks like your predecessor didn't do that. Please refer to the manual I linked in my previous message. It should answer a lot of your questions. Once you have a genberal understanding of how the NAS works, you can ask more pointed questions.
Since I no longer have any systems running OS 4.2.x, I won;t be the one answering those questions, though.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!