QNAP makes it sound so easy
1.Download OpenVPN from
http://openvpn.net/index.php/open-source/downloads.html
2.Install OpenVPN client on Windows. The default installation directory is C:\Program Files\OpenVPN.
3.Run OpenVPN GUI as administrator.
4.Download openvpn configuration file and certificate from the NAS (“Application Servers” > “VPN Service” > “VPN Server Settings” > “OpenVPN Settings”).
5.Edit openvpn.ovpn and replace “OPENVPN_SERVER_IP” with the openvpn server IP.
6.Put “ca.crt” and “openvpn.ovpn” into the configuration folder under OpenVPN configuration subdirectory (C:\Program Files\OpenVPN\config).
Note: If the OpenVPN clientis running on Windows 7, add the firewall rules in the advanced settings of OpenVPN.
I hope the following is useful.
OpenVPN is included in the QNAP firmware and I configure it via the GUI (
http://imgbox.com/eHfnm50D). The content of the generated configuration file (openvpn.ovpn) is
client dev tun script-security 3 proto udp remote xxx.myqnapcloud.com 1194 resolv-retry infinite nobind ca ca.crt auth-user-pass reneg-sec 0 cipher AES-256-CBC comp-lzo
That is the only configuration file that has been modified.
My laptop is running Windows 8. Openvpn.log:
Sat Feb 08 08:17:04 2014 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Sat Feb 08 08:17:14 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Feb 08 08:17:14 2014 UDPv4 link local: [undef]
Sat Feb 08 08:17:14 2014 UDPv4 link remote: [AF_INET]99.250.205.6:1194
Sat Feb 08 08:17:14 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Feb 08 08:17:14 2014 [TS Series NAS] Peer Connection Initiated with [AF_INET]99.250.205.6:1194
Sat Feb 08 08:17:24 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Feb 08 08:17:24 2014 open_tun, tt->ipv6=0
Sat Feb 08 08:17:24 2014 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{B33EF0E1-32F0-4B20-83DD-AF4EED211CF6}.tap
Sat Feb 08 08:17:24 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {B33EF0E1-32F0-4B20-83DD-AF4EED211CF6} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sat Feb 08 08:17:24 2014 Successful ARP Flush on interface [21] {B33EF0E1-32F0-4B20-83DD-AF4EED211CF6}
Sat Feb 08 08:17:29 2014 Initialization Sequence Completed
Sat Feb 08 08:20:24 2014 [TS Series NAS] Inactivity timeout (--ping-restart), restarting
Sat Feb 08 08:20:24 2014 SIGUSR1[soft,ping-restart] received, process restarting
Sat Feb 08 08:20:26 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Feb 08 08:20:26 2014 UDPv4 link local: [undef]
Sat Feb 08 08:20:26 2014 UDPv4 link remote: [AF_INET]99.250.205.6:1194
Sat Feb 08 08:20:26 2014 [TS Series NAS] Peer Connection Initiated with [AF_INET]99.250.205.6:1194
Sat Feb 08 08:20:36 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Feb 08 08:20:36 2014 open_tun, tt->ipv6=0
Sat Feb 08 08:20:36 2014 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{B33EF0E1-32F0-4B20-83DD-AF4EED211CF6}.tap
Sat Feb 08 08:20:36 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {B33EF0E1-32F0-4B20-83DD-AF4EED211CF6} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sat Feb 08 08:20:36 2014 Successful ARP Flush on interface [21] {B33EF0E1-32F0-4B20-83DD-AF4EED211CF6}
Sat Feb 08 08:20:41 2014 Initialization Sequence Completed
The Windows 8 Network Connections screen captures:
http://imgbox.com/LYnBTDyV
http://imgbox.com/39sWdkPv
http://imgbox.com/GrAN7vKF
