Ipsecsite2sitevpn

Hello friends sorry to disturb… Again I want to start putting site2site vpn with nethserver on 2 sites … 1 side nethserver other side synology Nas without nethserver but with vpn capability… Any thoughts… Much appreciated

Salut Vitor

I use Synology NAS a lot. Their NAS functions are good, but I can’t say the same for their “Server” functions. For example the DNS Server (Available as an Add-On):

When you activate the DNS Server on your Synology NAS, it assigns a random name to the DNS Server - without asking you! It does NOT use the Synology’s hostname either. Nor can you change the name later…

Now, a Server component using a random name is NOT something I want on any of my networks.

I don’t know how good the IPsec component is on Synology, but I assume if you fill in all the fields (Encryptions, IPsec Version, etc) they should be able to communicate with each other!

My 2 cents
Andy

I am no expert about that: what VPN options are available on Synology DSS?

@pike

Hi Michael

The VPN Package in Synology can do:

  • PPTP
  • OpenVPN
  • L2TP

As their description uses that order, I reproduce that bit verbatim. I find it amusing, putting the long outdated PPTP in first - and still keeping that functionality active!

My 2 cents
Andy

(Screenshot only available in German, Sry)

I find it scary. A lot.
The only answer is OpenVPN, but i really don’t know how these buddies can interoperate… Yet.

So IPSec into the title is really deceiving. i hope that someone will put a more sensed topic title.

You can change into user profile the language of the user, silly sysadmin :smiley:

@pike

Language: If you know better:

Changing the display language gets a simple error with a stupid message…

That’s the only field I changed, from Standard to English (It’s in the dropdown), and klicking on “OK” gives you a field error… (The field value (here english, from the dropdown) is not valid…)

Being wise does sometimes take experience and patience… :slight_smile:

Strangely enough, you can’t use OK, and if you cancel, it gives another message that all changes will be reverted, yet it DOES change the language!

IPsec is available on Synology, but no idea of what versions are supported. Most likely the OpenVPN is also limited by old components. It wouldn’t surprise me if old, correct bugs are still in there (Heartbleed?). But as I haven’t bothered to even try using Synologies OpenVPN implementation this is only an opinion.

My 2 cents
Andy

In english:

This seems to be a bit more accurate, they do mention LT2P/IPsec - not correctly translated or left out!

They make good NAS, but should leave it at that!

salut Andy, comment vas tu ?

i am testing with a friend an site to site vpn he has syno …and he said to me that one time ago when we tried to connect both, it worked for instance… and then pufff i was instable … sure the configuration… as usual but what is the main question…
l2tp / ipsec to nethserver side i assume only tu put the remote network thing… can you give an example on nethserver side please …

Currently (7x) NethServer do not supports L2TP. (At least Filippo said…)