Synology NAS: TLS Error: TLS key negotiation failed to occur

[mm_user]

Hello everyone.

I'm new to this software, so I met some difficulties trying to make it work.

I have a bunch of computers, a Synology NAS (that those computers have currently access to locally), and I'd like to be able to reach that NAS wherever I am (so no longer locally). QuickConnect isn't fast enough (it takes 2 minutes to load a little file, and like 10 minutes to open bigger ones..), so I'm using VPN Server. I configurated it, activated PPTP, OpenVPN & L2TP, etc.., and, basically, entirely followed this article.

I managed to connect my computer to the VPN, extracted the compressed file, put my DNS' IP adress in the openvpn.ovpn file, executed OpenVPN Gui as Administrator, entered the password I used to connect myself to the DNS, and then, I got this error :



(10.8.0.1:1194 being the dynamic IP adress created by OpenVPN on the DSM)

After some searches, I found that the error probably comes from some firewall blocking the communication, but, even after I allowed port number 1194 on my PC, on the DNS and on the router, still nothing happened.. Can you please help me?

(And sorry for my bad english..!)

[Traffic]

I configurated it, activated PPTP, OpenVPN & L2TP, etc..,

You only want to enable OpenVPN server not PPTP and L2TP ..

and, basically, entirely followed this article.

That is a dreadful article .. and it does not show how to setup your openvpn server.

This one is better:
https://www.synology.com/en-global/know ... /vpn_setup
(Scroll down to openvpn)

FWIW:

• 10.8.0.1 is most likely the OpenVPN Server VPN IP and cannot be used to connect to the NAS VPN.
  The NAS will have a LAN IP address, probably 192.168.x.x
  That is probably the one you need to use as --remote in your openvpn client config

[mm_user]

I configurated it, activated PPTP, OpenVPN & L2TP, etc..,

You only want to enable OpenVPN server not PPTP and L2TP ..

So I have to disable PPTP & L2TP?

and, basically, entirely followed this article.

That is a dreadful article .. and it does not show how to setup your openvpn server.

I also followed the other article, and this is my config (in French, sorry) :



The 192.168.x.x:xxxx doesn't work neither..

[Traffic]

I guarantee that --remote 10.8.0.1 1194 in your client config will not work because the VPN address is 10.8.0.1
The NAS IP and the one you need to contact your server by is the 192.168.x.x address.

I presume your client is on the same LAN as your server so:

After some searches, I found that the error probably comes from some firewall blocking the communication, but, even after I allowed port number 1194 on my PC, on the DNS and on the router, still nothing happened

I suggest you double check all those settings .. it is most likely your firewall blocking you.

[mm_user]

The NAS IP and the one you need to contact your server by is the 192.168.x.x address.

The port number stays 1194, or is it the 192.168.x.x:xxxx that goes in the --remote command?

I suggest you double check all those settings .. it is most likely your firewall blocking you.

The 3 things I have to check are the firewall on my PC, my router's one, and the one on the DSM?


The DSM :



My computer :



---



The router :

[Traffic]

It appears you have configured your server as TCP and your client as UDP .. they must be the same.

To configure the client use:

Code: Select all

remote ip.address
proto {choose the same as your server}
port 1194
nobind

[mm_user]

Oh, thanks ! I just put the DSM as UDP, and the connection worked ! Thanks a lot !

Now, it does means that I'll have access to my DNS, no matter what connection I'm using? (I have no other connection to use right now)

[Traffic]

Push whatever DNS you prefer to your client ..

but beware: Windows does not play nice with DNS so use --block-outside-dns for Windows.

See --block-outside-dns in The Manual v23x

[mm_user]

Sorry, I meant DSM, not DNS..

And btw, I tried the same with an other computer (a Mac, so I used Tunnelblick), I worked at first, I was connected, but then, I created a VPN connection that I deleted just after, and now it doesn't work anymore (TLS key negociation .....).

[mm_user]

Okay, so I managed to log myself with the Mac without changing anything, and then, after I disconnected, it doesn't work anymore..

[Exit]

There are two LAN's on Synology NAS, LAN1 & LAN2; make sure that Port Forwarding for 1194 is set against the LAN# that is specified in the OpenVPN settings.