Forum Discussion

Virtuoso

Oct 10, 2018

problems with Windows10 connecting to SMB share

I have been using SMB shares from my Readynas for a long time in home network with mostly all macs, but recently I changed one machine to a Windows10 machine and have had some issues with SMB. It wo...

File Sharing

StephenB

Guru - Experienced User

Oct 11, 2018

Dewdman42 wrote:

but then I tried to start up IPVanish for VPN and it immediately killed my SMB access to readynas.

This is running on Windows? (assuming so, but want to confirm).

Dewdman42 wrote:

I tried to change the windows box to home network rather then business network, but after reboot it always comes back as business network, I don't know if that's because Readynas is broadcasting somehting that Windows10 is automatically reacting too.

I am not sure what you mean here, but I don't think this is related to ReadyNAS. If you want to confirm that, just disconnect the NAS from the network when you do it.

Dewdman42 wrote:

Ok...so what is the proper way to configure SMB file shariing between Readynas and Win10...

Since this is working w/o IPvanish, I think you it is already configured correctly. My own approach is to set up the NAS for "everyone" access (both network and file access). All Windows PCs have NAS account credentials in the Windows Credentials Manager for both the NAS hostname and it's IP address. In my case I am using the NAS admin account for both. All the shares also have the owner/group set to admin/admin. Though the reason for using admin is that it translates when using rsync backup to legacy (OS 4) ReadyNAS. Guest doesn't. So if you aren't mixing legacy and OS6 NAS, you can stick with guest/guest for the default ownership.

You could of course use a different user account for credentials.

I've also enabled SMB3 transport encryption.

Dewdman42 wrote:

I tried to set the windows machine to Private rather the public network, since its at home. My hope was that by doing this, VPN would consider everything at 192.168.x.x as local and private stuff that should not be encrypted, including SMB access to readynas, while everything going out to ISP would be.

The local network should be set to private - one reason is that by default Windows disables SMB on public networks, and you don't want to change that setting. But that won't affect routing. If you can't ping the NAS by it's IP address when IPVanish is running, then you clearly have a routing issue.

Have you tried contacting IPVanish tech support?
Is your configuration using OpenVPN?

Dewdman42
Virtuoso
Oct 11, 2018
So it works fine by name as long as I don't start the VPN. I do not understand why the VPN should kill the connection.

What is the windows credentials manager you speak of?

Windows10 by default had the network set to public. I did change it to private, but it made no difference, VPN still drops connection to Readynas SMB.

I did not move to SMB3 yet, I'm not sure if my OSX Sierra computers are able to handle SMB3. Do you know?

Yes I believe it is using OpenVPN.
- StephenB
  Guru - Experienced User
  Oct 12, 2018
  Dewdman42 wrote:
  
  So it works fine by name as long as I don't start the VPN. I do not understand why the VPN should kill the connection.
  
  Can you ping the NAS IP address when the VPN is started?
  
  The VPN changes the Windows routing, to route all internet traffic through the encrypted tunnel to the VPN server. The way this works is that OpenVPN creates a virtual network adapter, and changes the routing tables in Windows to send traffic through that adapter. You don't want to route local traffic through that adapter, but in some setups it does. The first thing to figure out is whether that is happening in your case.
  
  One possibility is that the virtual adapter is using the same address space your home network is using (192.168.1.x). You can open a CMD box with the VPN running, and enter ipconfig. That will give you some information on what IP address is assigned to the VPN adapter.
  
  If you can ping the NAS by IP address, then also try entering \\nas-ip-address in file explorer, and see if that works. The VPN software will also adjust how name resolution is done (because if you use your ISP's DNS server, your ISP will know where you are browsing). Name resolution is different from routing, and would need a different solution.
  
  I do suggest contacting ipvanish support - this issue isn't about the ReadyNAS, and I'm sure other ipvanish customers have had the same problem with network shares (and likely network printers as well).
  
  Dewdman42 wrote:
  
  I did not move to SMB3 yet, I'm not sure if my OSX Sierra computers are able to handle SMB3. Do you know?
  
  Enabling SMB3 on the NAS doesn't disable SMB 1 and SMB 2. So it is safe to enable it. Just don't set SMB3 transport encryption to "required", as that will disable SMB 1 and 2.