In a previous video we installed VPN Server onto our Synology NAS. Then with VPN Server installed, we configured it to use L2TP/IPSec. So in this video we are going to take a look at how we configure the VPN client built into Windows 10 and then demonstrate how we connect to our NAS using the VPN client.
Please note that Synology’s documentation is often vague and can be a little confusing. This makes configuring Synology’s VPN Server a more difficult task to complete. So what you will view in this video, is based on what we have been able to ascertain from trial and error, rather than a definitive source.
Quick reference notes:
Notes: As our Synology NAS and VPN server are behind a NAT firewall. In order for Windows 10 to be able to bypass the NAT firewall, we need to make a change to the Registry in Windows 10 so that we enable NAT Traversal.
- From the desktop of Windows 10 open the Registry Editor
- Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent
- Create a new DWORD (32-bit) Value
- Name the DWORD value AssumeUDPEcapsulationContextOnSendRule
- Modify the value with 2
- Reboot Windows
Note: When configuring your VPN client you need to have the following information. The public IP address or domain name to your Synology NAS. The account credentials for someone allowed to connect to your VPN Server. The Pre-share key used with your VPN Server.
- Once again from the Windows 10 desktop, open VPN Settings
- Select Add a VPN connection
- Within VPN Provider select Windows (built-in)
- In the Connection name field give your VPN connection a meaningful name
- Under the Server name or address field enter either the public IP address of your broadband connection or the domain name for your NAS.
- For the VPN type field choose L2TP/IPsec with pre-shared key
- Enter your Pre-shared key in the Pre-shared key field
Notes: The Pre-share key will be the same as the Pre-share key that you create when you were configuring VPN Server on your Synology NAS.
- Enter the Username of a user with access privileges to VPN server
- Type the password for that user
- Select Save
- Choose OK
- You are now ready to test your new VPN connection.
Reference materials:
- Synology Support Article – Setup VPN Server
- Synology Support Article – How to connect to Synology’s VPN Server using a WIndows PC or Mac
- Microsoft Support – How to connect to standard VPN servers when behind a NAT device
