Can't access QNAP NAS remotely through ASUS OpenVPN server

[Navat604]

You can also try turning off the Asus firewall for testing. Possible your away subnet is the same as your home subnet?

[steelz1]

@ritchierich

Good question. @marktheknife you can download a free iOS app called Ping Lite to verify if you can ping your NAS IP.

I didn't think about what device you are connecting in with, I was assuming it was a laptop but @marktheknife is right, if it's iOS there are a ton of apps, i personally use iNetTools for iOS.

[marktheknife]

@Navat604

Possible your away subnet is the same as your home subnet?

Right now I'm on a 192.168.1.1/24 network.

[steelz1]

@ritchierich

The only additional idea I have is QNAP has security features to block access from specific IP ranges

Yea, this is what i was talking about in my initial post, @ritchierich said it much better lol..

[ritchierich]

@marktheknife

@steelz1 good thought re: trying to ping the NAS. Doing that from a cmd prompt in Windows times out on each request.

Are you saying you cannot ping your NAS even from a windows machine within your local NAT network? Times out each time?

@marktheknife

Yeah this is indeed on my list of projects. If I've been reading correctly, I'll need to reconfigure the router manually once I flash the merlin firmware. Having to re-do the list of DHCP reservations (which has gotten pretty long at this point) is probably what's holding me up the most.

Oh and yes you will need to setup everything manually again which is a bummer.

[marktheknife]

@ritchierich

Are you saying you cannot ping your NAS even from a windows machine within your local NAT network? Times out each time?

no, sorry. Since creating this thread I've been away from home. So all this troubleshooting has been through the VPN. If I use Remote Desktop Connection to get into my Win 10 NUC PC that's at home (from my remote laptop that's connected to the VPN server at home), I can still access the NAS without any issues.

Just not directly from my laptop, iphone etc. that are tunneling directly through the VPN.

[steelz1]

@marktheknife then i would definitely look at what @ritchierich commented on:

@ritchierich

Mark, I did another side by side comparison of your settings to mine and they are pretty much the same. The only additional idea I have is QNAP has security features to block access from specific IP ranges. In your Asus settings your VPN clients are assigned a 10.8.0.0/24 IP address which is obviously different than when you are connected to your Wifi getting a 192.168.0.0/24 address.

Login to your QNAP, go to Control Panel and in the System section click Security. Check your settings on the Allow/Deny List. What is your top setting? If set to allow from list, make sure 10.8.0.0/24 is included if deny connections from list make sure 10.8.0.0/24 is not listed as "block forever".

Keep in mind that ICMP packets may be blocked on the QNAP as well so "ping" may not respond but as @ritchierich said, i think we are getting warmer, i think the VPN subnet/network needs to be added to your QNAP security settings to allow access.

[marktheknife]

@steelz1

i think the VPN subnet/network needs to be added to your QNAP security settings to allow access.

Success ! I added my local subnet and the VPN subnet to the security settings. Now I can ping the NAS from my remote laptop, login to it's web interface, and access it from QNAP's Qmanager app on my iphone.

Now I'll just have to remember to add any IP ranges outside of these two if I make any major changes to my LAN or VPN setup in the future. But for now I seem to be good!

Thanks for all the suggestions, everyone!

[steelz1]

@marktheknife

Success ! I added my local subnet and the VPN subnet to the security settings.

Congrat!!! i'm glad you got it figured out!!!

[ritchierich]

@marktheknife

Success !

Sweet glad you got it working. Now delete your OP screenshot so the world doesn’t know your VPN settings

[marktheknife]

LOL, so that's why I've been getting notifications from my hub all morning that it's time to send a bunch of bitcoins to someone in Russia, or else...

[rich.princeau]

@marktheknife

time to send a bunch of bitcoins to someone in Russia, or else...

You must use the internet differently from me. All I get are ads for ED pills/devices.