Page 1 of 1

Open VPN server on synology NAS over NAT

Posted: Fri May 04, 2012 11:19 am
by Bart82
Hi,
Cannot find solution anywhere.

Problem:
NAS Synology server with Open VPN server on port 1194 working in subnet: 192.168.23.0/24 with ip 192.168.23.100 is behing office router (ip 192.168.0.232)



Network configuration:
Port forwarding :1194

62.148.xx.xx -> 192.168.0.232 -> 192.168.23.100

IP: 62.148.xx.xx (open port 1194 UDP and TCP) is redirected to internal network to ip 192.168.0.232:1194 this internal IP is office router that forward port 1194 to 192.168.23.100 which is Synology NAS server with OpenVPN.

I cannot conect to this VPN using such client configuration (generated by Synology NAS):
===============
client
dev tun
tls-client
remote 62.148.xx.xx 1194
pull
proto udp
ca ca.crt
reneg-sec 5
auth-user-pass
script-security 2
==================

Connection log:

Fri May 04 13:12:46 2012 OpenVPN 2.1_rc20 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Oct 1 2009
Enter Auth Password:
Fri May 04 13:12:50 2012 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Fri May 04 13:12:50 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri May 04 13:12:50 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri May 04 13:12:50 2012 UDPv4 link local (bound): [undef]:1194
Fri May 04 13:12:50 2012 UDPv4 link remote: 62.148.xx.xx:1194
Fri May 04 13:12:50 2012 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri May 04 13:12:52 2012 [Snake_Oil_CA] Peer Connection Initiated with 62.148.xx.xx:1194
Fri May 04 13:12:54 2012 AUTH: Received AUTH_FAILED control message
Fri May 04 13:12:54 2012 SIGTERM[soft,auth-failure] received, process exiting
Fri May 04 13:12:55 2012 OpenVPN 2.1_rc20 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Oct 1 2009

User and password i enter are correct.

Is there something wrong?
Please Help;

Re: Open VPN server on synology NAS over NAT

Posted: Fri May 04, 2012 11:25 am
by maikcat
without server configs/logs cant tell why doesnt work..

from client logs

Fri May 04 13:12:54 2012 SIGTERM[soft,auth-failure] received, process exiting

authentication failure...

post logs please.

Michael.

Re: Open VPN server on synology NAS over NAT

Posted: Mon May 07, 2012 6:29 am
by Bart82
Thank You for reply.

Unfortunately the enviroment configuration website(for Synology DS) shows no logs for when trying to connect.
And what is more i do not konw how to see this server configuration . I can only enable it in the configuration website and generate client config.
Here is an example for PPTP and it looks similar for OpenVpn:
http://www.synology.com/dsm/business_bu ... p?lang=enu