How do i connect to my NAS drive using a VPN client as if i were local

[DCS1]

I recently realised my Readynas Remote connection to an ReadyNAS Ultra 2 was not ging to work on a Windows 10 machine. Readynas Cloud does not integrate with OS 4 legacy devices and cannot "discover" the Readynas Ultra 2. A Netegar specialist spent 2 hours trying and failed.

So i must seek a VPN solution direct to the NAS drive. I don't want to rely on a PC as a remote desktop. I just want to be able to see the NAS shares on my NAS drive securely as if i were local.

I have a Netgear Router serving as a DHCP server behind a Virgin cable modem connection to the internet.

Any ideas?

[StephenB · Accepted solution]

---

@DCS1 wrote:

My customer has Readynas Remote that he was happy using to access his own confidential data but to what encryption level this provides i do not know. Perhaps you can enlighten me.

ReadyCloud seems to be just a rename of the ReadyNas Remote service but as there is little information on how they compare i decided to investigate it from the position of providing a solution with guaranteed levels of security.

---

Netgear hasn't disclosed what encryption their VPN is currently using, and they've never provided a security whitepaper on the overall solution.  There are some really old descriptions on leaf, but I have no idea any of that is still valid.

ReadyCloud isn't just a rename, Netgear is layering more features (controlled sharing, etc) on top of the VPN.

---

@DCS1 wrote:

Virgin don't provide static IP addresses to residential customers so i presume i will need a Dynamic DNS account although the whole issue of compliance with the data protection act when using a DDNS services is raised again?

---

You will need a ddns account.  I don't know the compliance implications of that.  Technically, a hijacked DDNS server could mount a man-in-the-middle attack (putting a device between the VPN client and the VPN server).  VPNs are supposed to be designed to defend against those attacks, but you do see CVEs from time to time on that.

[ElaineM]

Welcome to the community, @DCS1

What's the exact model number of your NETGEAR router?

In this way, you can check if OpenVPN is applicable for you to use. 

Once you have established the connection, you can just access the drive remotely. 

[DCS1]

First thank you for replying i appreciate you taking the time to help me. The Router is DGND3700 Cable Modem Router.

[StephenB]

---

@DCS1 wrote:

First thank you for replying i appreciate you taking the time to help me. The Router is DGND3700 Cable Modem Router.

---

You'd need a nighthawk router (or Orbi) to run openVPN.  It works well (and is what I use myself).

OwnCloud is one option for your ultra 2 - @WhoCares_ has an add-on which you can get here: https://rnxtras.com/readynas-os4-x86  

It is also possible to run OS 6 on your ultra, there are instructions in the ReadyNAS forum if you want to pursue that.  You'd lose Netgear software support, and the process does require a factory reset. Once done, you would be able to run ReadyCloud.

[ElaineM]

Or another option is to setup the Client-to-Gateway VPN option on your DGND3700.

See page 87 of the manual.

[DCS1]

I checked out the "owncloud" solution you suggested and i can undertsand the potential for its use. The main challenge is to meet the requirements to the data protection act. It is not clear how it provides under the act everything required for lets say storage of a patient's medical records ?

I suspect it doesn't meet this requirement.

Thanks for your suggestion though, It coudl be very useful for personal use.

[StephenB]

---

@DCS1 wrote:

I checked out the "owncloud" solution you suggested and i can undertsand the potential for its use. The main challenge is to meet the requirements to the data protection act. It is not clear how it provides under the act everything required for lets say storage of a patient's medical records ?

---

And you think ReadyCloud does?  It'd be interesting to hear why you think that (though it is off-topic). Though the requirements would depend on what country you are in.

If you are handling medical records, I think your best option is to deploy a router that has a built-in VPN.  Nighthawks with OpenVPN might be secure enough (depending on the details of what encryption strength you need), or you could go with a small-business VPN router.  

Using your own VPN keeps the network connection and security firmly under your control, with no dependencies on third-party services that you can't audit.  Like (for instance) ReadyCloud's web portal and Netgear's traversal servers.

[DCS1]

The requirement for access to medical records was a seperate question entirely that came about because I wanted to know what system it would take to have that level of encryption and to be able to legally claim compliance.

My customer has Readynas Remote that he was happy using to access his own confidential data but to what encryption level this provides i do not know. Perhaps you can enlighten me.

ReadyCloud seems to be just a rename of the ReadyNas Remote service but as there is little information on how they compare i decided to investigate it from the position of providing a solution with guaranteed levels of security.

The cost of equeipment unless one considers Cisco or simillar systems is not prohibitive so it seemed sensible to offer the best solution with maximum security even if it means replacing the kit the customer has.

The built in VPN function seems to be available on the DGDN3700 router if it is being used as a ADSL 2 modem but not connected by ethernet cable to one of the four ports of the Virgin supplied cable unit. I suspect both will need replacement but I was not sure hence my enquiry.

Virgin don't provide static IP addresses to residential customers so i presume i will need a Dynamic DNS account although the whole issue of compliance with the data protection act when using a DDNS services is raised again?

I have other applications such as remote access to court evidence.

I really appreciate the feedback. Once i have one system installed i am sure it will easier for me to understand but at the moment it is all new to me.

[StephenB · Accepted solution]

---

@DCS1 wrote:

My customer has Readynas Remote that he was happy using to access his own confidential data but to what encryption level this provides i do not know. Perhaps you can enlighten me.

ReadyCloud seems to be just a rename of the ReadyNas Remote service but as there is little information on how they compare i decided to investigate it from the position of providing a solution with guaranteed levels of security.

---

Netgear hasn't disclosed what encryption their VPN is currently using, and they've never provided a security whitepaper on the overall solution.  There are some really old descriptions on leaf, but I have no idea any of that is still valid.

ReadyCloud isn't just a rename, Netgear is layering more features (controlled sharing, etc) on top of the VPN.

---

@DCS1 wrote:

Virgin don't provide static IP addresses to residential customers so i presume i will need a Dynamic DNS account although the whole issue of compliance with the data protection act when using a DDNS services is raised again?

---

You will need a ddns account.  I don't know the compliance implications of that.  Technically, a hijacked DDNS server could mount a man-in-the-middle attack (putting a device between the VPN client and the VPN server).  VPNs are supposed to be designed to defend against those attacks, but you do see CVEs from time to time on that.

[DCS1]

Thanks fro your help.