NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Dotchin
Dec 06, 2015Aspirant
Unable to access readynas 104 over vpn
Hi Guys,
I've got a readynas 104 connected to a virgin superhub and am using the nas as a softether vpn host.
I have successfully connected two properties together using softether vpn server and am able to connect remotely and locally to the vpn.
I have one router broadcasting on local IP 192.168.0.1 and the other broadcasting on 192.168.10.1 to prevent local IP clashes.
Now heres the problem, although the VPN appears to be working fine, I am unable to access the nas drive remotely. I access the VPN via my mac but the issue is the same on a windows computer remotely.
When I VPN into the network, I can ping all devices on the network and even access the shares on the different computers, however when I ping 192.168.0.3 (the IP the nas is located and all the port forwarding is set to) or try to connect, it seems to time out. If I connect to the local network however, this works fine.
I have disabled the anti virus software on the nas, but am not sure why only the nas is inaccessible across the VPN. Any ideas guys? I'm at a loss.
Thanks in advance.
- https://community.netgear.com/t5/Current-NETGEAR-and-Partners/Softether-VPN-Server-help/m-p/914754#M2566Resolved by carrying out instructions in last thread
17 Replies
Replies have been turned off for this discussion
- DotchinAspirantAlso just to clarify if I join the local network I can access the drive via afp/smb fine and access the nas admin page but neither of these work external when I vpn in. The reason why I struggle to isolate is because other computers can be connected to on the vpn.
- StephenBGuru - Experienced User
Dotchin wrote:
Also just to clarify if I join the local network I can access the drive via afp/smb fine and access the nas admin page but neither of these work external when I vpn in. The reason why I struggle to isolate is because other computers can be connected to on the vpn.I don't have a solution,but apparently this a fairly common issue with softetther vpn servers. See for instance here: http://www.vpnusers.com/viewtopic.php?p=11204&sid=b4eeb57c0169c21a148406da79b1e5f3
Have you tried the softether forum?
- DotchinAspirant
Yeah i've posted on there a few times. Quite slow / non-existent response. Thanks for the response, it's really appreciated. Sad to hear its likely a softether issue, as for what seems a basic issue on the surface now seems like a pretty in depth fix. I'll have a good read however and see if this is within / beyond my ability.
- DotchinAspirantYeah think the reason why I went for softether is because it came bundled with the add on and did half the work. As a new user of vpns I don't understand as much as most so would probably struggle to configure openvpn if it gets complicated. Thanks for the response. I tried readycloud but it's very slow for the data I'm streaming.
- StephenBGuru - Experienced User
Dotchin wrote:
As a new user of vpns I don't understand as much as most so would probably struggle to configure openvpn if it gets complicated.It can get very complicated. Some Netgear routers (including my R8500) have built-in openvpn support, including creating a config file for you to download to your device. Like you, my ISP router doesn't support openvpn, but I have the R8500 between the ISP router and my main network (I've done that for some years for a variety of reasons).
I'm still transitioning to that approach, but I like the idea of reducing the number of forwarded ports in my router setup.
- DotchinAspirantSo purchasing an r8500 could be the solution I'm looking for? Run that from the isp router. Basically what I'm looking to achieve is to vpn to my nas so I can access it externally. Is the vpn on the r8500 a hard setup?
- DotchinAspirant
>>>
>>> This was actually the first post on the subject - I consolidated after I saw the duplication - StephenB
>>>
Hi Guys,
I've browsed the boards before asking this and have asked the question on softether webstite, and although a lot of people had similar issues to myself, I couldn't quite find a response for the same issue I have. Although I am very tech savvy I am very new to VPN so I apologise for any ignorance in this field.
I have a readynas 104 set up in a property next door. It is connected to a virgin superhub via ethernet and it is accessible on the internal network just by using SMB or AFP.
What I am trying to do is access this same NAS drive from the property next door without the need to run a huge cable between the houses.
The readynas came with the softether bundle addon included, so I have installed this addon and the server software installed correctly.
I then downloaded the server manager onto the PC and began setting it up. The setup I went for was an L2TP/IPSec setup as outlined in https://www.softether.org/4-docs/2-howt ... VPN_Server and I followed this article closely.
Now in order to make any modifications to this server via the server manager, I have to enter the external IP address 82.XX.XX.XX. The VPN appears to be running, I have added a user account to connect to, and there appears to be no errors from the server manager.
Where I really get the issue, is when trying to connect to the readynas through VPN externally.
I am looking to connect my mac to the VPN so used the instructions as outlined in https://www.softether.org/4-docs/2-howt ... ient_Setup
The computer seems to think about it, then rejects the connection on the grounds that the VPN server (readynas) was not responding. The software on the readynas VPN is working correctly, because if I enable a local bridge I am able to connect to the VPN via the internal IP address 192.168.0.3 (which the readynas is located on).
All my attempts to connect externally to the readynas seem to have been problematic. I have disabled the router firewall and opened ports 1701, 500 and 4500 as I have read somewhere that they need to be open.
Am I missing something obvious here? This is advertised as an easy setup, and although I can't say the instructions were difficult, I am having not much success.
Any help would be greatly appreciated.
PS. I can use the server manager to connect to the external IP address, however this only works when I remain on that network. As soon as I go to the other property, the settings entered in server manager, no longer connect. - StephenBGuru - Experienced User
Dotchin wrote:
So purchasing an r8500 could be the solution I'm looking for? Run that from the isp router. Basically what I'm looking to achieve is to vpn to my nas so I can access it externally. Is the vpn on the r8500 a hard setup?The R8500 is a very high-end router (and more expensive than a RN104) - there are less expensive (but still fairly pricey) Nighthawk models that also have the feature. There's a setup guide here: http://kb.netgear.com/app/answers/detail/a_id/23854/~/how-do-i-use-the-vpn-service-on-my-nighthawk-router-with-my-windows-client%3F.
It only supports TAP, and most mobile openVPN clients only support TUN. So there is a challenge with android or ios devices. But so far its worked well with my laptop.
DD-WRT firmware has openVPN built in too, which allows cheaper routers (for instance the R6200v2) to be used.
- StephenBGuru - Experienced User
Looking at your original post, I realized that the remote NAS is located next door.
Can you see a decent wifi signal from the adjacent property?
- DotchinAspirantNo it's quite poor it's detectable but weak
- StephenBGuru - Experienced User
Dotchin wrote:
No it's quite poor it's detectable but weakI was thinking that if you had a line-of-sight between the buildings, you could potentially use wifi extenders (using the second NIC in the RN104). But if you don't have enough signal, won't work.
Do you need SMB or AFP access from your end? Or would HTTPS and FTPS be enough?
- DotchinAspirant
Thats a really interesting concept you've latched on to there, which I am surprised I didn't think about myself.
So could two wifi extenders be used to bring networks together? If so what would be attached to what.
Both houses use virgin superhubs so the layout is very similar. At this point if i'm being honest with you i'm even thinking about laying a massive gigabit cable between the houses, but I am unsure how the nas will react with two different cables attached to both interfaces. As both routers will be trying to assign IP's.
The VPN is working, just not for the NAS. The post you forwarded me on to on the softether website is plausible and is likely something i'll figure out, as they indicate I need to create a tap interface rather than a local bridge, but it goes slightly over my head at the moment. There is also the added doubt I have that if I am streaming content from one house to another, whether or not the VPN would be able to handle such data. The more I look into it though, the more I understand how everything works.
- amofInitiate
Hello,
I managed to access the VPN outside my network.
In my case, my router hasn't an OpenVPN server. So, I set up the VPN on the NAS.
You have to distinguish two cases (because the configuration is different):
1. You want to access your NETWORK
2. You want to access your NAS
You have to create two virtuals hubs (one for each case).
1. The configuration for the first one is normal. You have to do a local bridge between your ethernet port and the virtual hub to access the network.
2. For the second one, you have to go to Manage Virtual Hub then Virtual NAT and Virtual DHCP Server (Secure NAT).
You HAVE to enable the SecureNAT.
You can connect to the two virtual hub when you want to connect you to the VPN and your network !
And of course, you have to redirect at least one port of your router to your NAS.
You can verify here :http://canyouseeme.org/
Hope that it helps you !
- DotchinAspirant
Thanks for the suggestion, as always they are welcome, and I always try.
I created the two virtual hubs as you suggested and set one up with secure nat and the other as a local bridge, I did not have much luck with this as the computer was clearly only joining one of the hubs at a time depending on which one I specified.
The odd thing is, the entire VPN is hosted by the very NAS i want to connect to, so I can clearly connect to it, but not connect to the mountable drives. When I connect to the VPN, I am able to connect to both routers and their homepages, and any computers on the network, just not the NAS. It's wierd.
- amofInitiate
Hello Dotchin,
Sorry I give you only one part of the solution. :(
Don't remember that you have to something more !
So here is the additional step you need to do :
For the virtual hub only for the NAS :
Go into Virtual Hub properties then Virtual Hub Extended Option List.
You need to put '1' at the parameter DisableKernelModeSecureNAT.
And now, you must be OK (it worked for me).
- DotchinAspiranthttps://community.netgear.com/t5/Current-NETGEAR-and-Partners/Softether-VPN-Server-help/m-p/914754#M2566Resolved by carrying out instructions in last thread
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!