ASUSTOR - Website Management

Date:

Topic_id:

Subject:

Description:

content:

<h4>COURSE OBJECTIVES</h4>
Upon completion of this course you should be able to:
<ol>
<li>Be able to use your ASUSTOR NAS as a VPN server and connect to it using Windows and Mac.</li>
</ol>
 
<h4>PREREQUISITES</h4>
Course Prerequisites:
None
Students are expected to have a working knowledge of:
N/A
 
<h4>OUTLINE</h4>
<a href="#1">1. Configuring Your VPN Server</a>
<a href="#1.1">1.1 Enabling and configuring PPTP connections </a>
<a href="#1.2">1.2 Enabling and configuring OpenVPN connections</a>
<a href="#1.3">1.3 Enabling and configuring L2TP connections</a>
<a href="#1.4">1.4 Enabling and configuring WireGuard VPN connections</a>
<a href="#2">2. Connecting to Your VPN Server Using Windows and Mac</a>
<a href="#2.1">2.1 Connecting to your VPN server via PPTP</a>
<a href="#2.1.1">2.1.1 Connecting using Windows 11</a>
<a href="#2.1.2">2.1.2 Connecting using a Windows 10</a>
<a href="#2.2">2.2 Connecting to your VPN server via OpenVPN</a>
<a href="#2.2.1">2.2.1 Connecting using Windows 11</a>
<a href="#2.2.2">2.2.2 Connecting using a Mac</a>
<a href="#2.3">2.3 Configuring the gateway and routing for the VPN client</a>
<a href="#2.3.1">2.3.1 Configurations using Windows 7</a>
<a href="#2.3.2">2.3.2 Configurations using Windows 10</a>
<a href="#2.3.3">2.3.3 Configurations using a Mac</a>
<a href="#2.4">2.4 Connecting to your VPN server via L2TP/Ipsec</a>
<a href="#2.4.1">2.4.1 Connecting using Windows 7</a>
<a href="#2.4.2">2.4.2 Connecting using Windows 10</a>
<a href="#2.4.3">2.4.3 Connecting using a Mac</a>
<a href="#2.4.4">2.4.4 Connecting using an Android device</a>
<a href="#2.4.5">2.4.5 Connecting using an iOS device</a>
<a href="#25">2.5 Connecting to your VPN Server via WireGuard VPN</a>
<a href="#251">2.5.1 Connecting using Windows 11</a>
<a href="#252">2.5.2 Connecting using a MAC</a>
<a href="#253">2.5.3 Connecting using an iOS device</a>
<a href="#254">2.5.4 Connecting using an Android device</a>
 <hr /> 
<a name="1"></a>1. Configuring Your VPN Server
In the following example, we wil configure ASUSTOR NAS’s VPN Server. Before you begin, log in to ADM from your Web browser and then search for and install [VPN Server] from [App Central].

<a name="1.1"></a>1.1 Enabling and configuring PPTP connections
 
STEP 1
Enabling PPTP service: You can use the toggle found under [PPTP] to enable PPTP service.
 
<img src="https://www.asustor.com/images/tinymce/upload_img_20240418105724_PPTP.png" alt="" width="800" height="480" />

STEP 2 
Adding a new user: Select [Privilege] → [User] → [Add]. In the graphic below, we have chosen to add the account “vpn” as an example. After you have chosen the user that wish to add, click on [Save].
<img src="https://www.asustor.com/images/tinymce/20211022073527_VPN priviliege.JPG" alt="" width="800" height="486" /> 
Select the [PPTP] checkbox and then click on [Apply]. Now, the “vpn” user account will be able to utilize PPTP connections.
<img src="https://www.asustor.com/images/tinymce/20211022073908_Privilege.png" alt="" width="800" height="482" />

STEP 3 
Configuring advanced settings: Select [Settings] → [PPTP]. Here, you will be able to configure settings for [Dynamic IP address], [Max. client number], [Authentication], [Max. MTU], [Max. MRU] and [DNS server]. Make sure to click on [Apply] after you have made any changes to the settings.
<img src="https://www.asustor.com/images/tinymce/20211022072513_PPTP no.JPG" alt="" width="800" height="483" /> If you are using an ASUS router, please manually open port 1723 under port forwarding. Some other routers might have to do a similar procedure. From the router configuration interface, select [WAN]> [Virtual Server / Port Forwarding] tab > [Port Forwarding List]. Add a new item to the Port Forwarding list by entering the following information: Service Name: A name of your choice Port Range: 1723 ,(You can also add port 47 and select other protocol) Local IP: Your NAS’s IP address. Local Port: 1723 Protocol: TCP Click on the [Add] button after you have entered all the information. Port 1723 should now be opened. (1) port 1723, protocol TCP (2) port 47, protocol other <img src="http://kmpic.asus.com/images/2017/08/09/5c36bb7d-8b90-433e-bf94-b2c96ecda63f.png" /> <a name="1.2"></a>1.2 Enabling and configuring OpenVPN connections STEP 1 
Enabling OpenVPN service: You can use the toggle found under [OpenVPN] to enable OpenVPN service.
<img src="https://www.asustor.com/images/tinymce/upload_img_20240418105741_OpenVPN.png" alt="" width="800" height="480" /> STEP 2 
Adding a new user: Select [Privilege] → [User] → [Add]. In the graphic below, we have chosen to add the account “vpn” as an example. After you have chosen the user that wish to add, click on [Save].
<img src="https://www.asustor.com/images/tinymce/20211022073527_VPN priviliege.JPG" alt="" width="800" height="486" /> 
Select the [OpenVPN] checkbox and then click on [Apply]. Now, the “vpn” user account will be able to utilize PPTP connections.
<img src="https://www.asustor.com/images/tinymce/20211022073908_Privilege.png" alt="" width="800" height="482" /> STEP 3 
Configuring advanced settings: Select [Settings] → [OpenVPN]. Here, you will be able to configure settings for [Dynamic IP address], [Transmission Protocol], [Port], [Max. client number], [Checksum (Digest)], [Encryption (Cipher)], [DNS server], [Redirect gateway] and [VPN link compression]. Make sure to click on [Apply] after you have made any changes to the settings.
<img src="https://www.asustor.com/images/tinymce/20211022072111_open vpn settings.JPG" alt="" width="800" height="486" />

 Note: Click on the [Download configuration file] button to download the configuration file for OpenVPN clients. You must import this file to your VPN client in order to successfully create OpenVPN connections. If you are using an ASUS router, please manually open port 1194 under port forwarding. Some other routers might have to do a similar procedure. From the router configuration interface, select [WAN] > [Virtual Server / Port Forwarding] tab > [Port Forwarding List]. Add a new item to the Port Forwarding list by entering the following information: Service Name: A name of your choice Port Range: 1194  Local IP: Your NAS’s IP address. Local Port: 1194 Protocol: UDP Click on the [Add] button after you have entered all the information. Port 1194 should now be opened. 
 <img src="http://kmpic.asus.com/images/2017/08/09/cfc4f572-7546-4e9e-a59b-751f86d21099.png" />
 <a name="1.3"></a>1.3 Enabling and configuring L2TP connections STEP 1 Enabling L2TP service: Enable L2TP service by using the provided toggle button.
<img src="https://www.asustor.com/images/tinymce/upload_img_20240418105758_L2TP.png" alt="" width="800" height="480" /> STEP 2 Add new users: Select [Privilege] > [User] > [Add]. In this example we add the user “vpn” by selecting its checkbox and then clicking on [Save].
<img src="https://www.asustor.com/images/tinymce/20211022073527_VPN priviliege.JPG" alt="" width="800" height="486" /> 
 
For the added user, select the [L2TP] checkbox and then click on [Apply]. This will allow the user to use L2TP connections. <img src="https://www.asustor.com/images/tinymce/20211022073908_Privilege.png" alt="" width="800" height="482" /> STEP 3 Modifying advanced settings: Click on [Settings] >[L2TP]. Here you will be able to configure settings such as the dynamic IP address, max client number, max MTU, DNS server and key. Make sure to click on [Apply] once you are done modifying the settings.
<img src="https://www.asustor.com/images/tinymce/20211022071459_L2TP no.JPG" alt="" width="800" height="485" /> If you are using an ASUS router, please manually open port 500,4500,1701 under port forwarding. Some other routers might have to do a similar procedure. From the router configuration interface, select [WAN] > [Virtual Server / Port Forwarding] tab > [Port Forwarding List]. Add a new item to the Port Forwarding list by entering the following information: Service Name: A name of your choice Port Range:  500,4500,1701 Local IP: Your NAS’s IP address Local Port: 500,4500,1701 Protocol: UDP Click on the [Add] button after you have entered all the information. Port 500 should now be opened. <img src="https://www.asustor.com/images/tinymce/20211026061303_L2TP Router.png" width="691" height="228" alt="" />
 <a name="1.4"></a>1.4 Enabling and configuring WireGuard VPN connections STEP 0 Before enabling WireGuard. It is imperative that ADM Kernel Extensions be installed first. ADM Kernel Extensions is found in App Central. <img src="https://www.asustor.com/images/tinymce/upload_img_20240418101746_3.png" width="800" height="462" alt="" /> If ADM Kernel Extensions has not been installed, VPN Server will prompt you to install ADM Kernel Extensions if attempting to enable WireGuard. <img src="https://www.asustor.com/images/tinymce/upload_img_20240418101709_2.png" width="800" height="480" alt="" /> STEP 1 Activate the switch for WireGuard to activate the WireGuard VPN server. <img src="https://www.asustor.com/images/tinymce/upload_img_20240418101817_4.png" width="800" height="483" alt="" /> STEP 2 Click WireGuard under Settings in VPN Server. Click on Generate Key Pair. The public key from this key pair needs to be copied and pasted into the WireGuard client connection. Click on the adjacent button to copy the public key. The default address for a WireGuard VPN is 10.0.4.1. <img src="https://www.asustor.com/images/tinymce/upload_img_20240418101916_11.png" width="800" height="481" alt="" /> STEP 3 Under Privileges click WireGuard Peer. Click Create When adding a new peer, input the peer's name. As an example, the name Test is used. Paste the public key from the client and set all allowed IPs needed. This guide uses 10.0.4.2 as an example. Click OK. This completes the setup of a WireGuard configuration for a specific peer. To add more connections in the future, they must be created within WireGuard Peer. <img src="https://www.asustor.com/images/tinymce/upload_img_20240418102011_7.png" width="800" height="480" alt="" /> <a name="2"></a>2. Connecting to Your VPN Server Using Windows and Mac <a name="2.1"></a>2.1 Connecting to your VPN server via PPTP <a name="2.1.1"></a>2.1.1 Connecting using Windows 11 STEP 1 
Click the Network icon on the right-hand side of the task bar and select Network and Internet settings.
<img src="https://www.asustor.com/images/tinymce/upload_img_20240325153843_Win11pptp01.png" alt="" width="282" height="151" title="" align="" /> STEP 2 
Select VPN.
 <img src="https://www.asustor.com/images/tinymce/upload_img_20240325153955_Win11pptp02.png" alt="" width="800" height="642" /> STEP 3 
Select Add VPN.
 
<img src="https://www.asustor.com/images/tinymce/upload_img_20240325154032_Win11pptp03.png" alt="" width="800" height="644" />

STEP 4 
Select Windows (built-in) under VPN Provider. Type in a name for this VPN connection and enter either the current hostname or WAN IP address of your ASUSTOR NAS into the Server name or address field. Choose PPTP as the VPN Type, enter the username/password in the appropriate fields, and click Save.
 <img src="https://www.asustor.com/images/tinymce/upload_img_20240325160947_Win11pptp04.png" alt="" width="800" height="482" /> <img src="https://www.asustor.com/images/tinymce/upload_img_20240325160958_Win11pptp05.png" width="800" height="646" alt="" /> STEP 5 
Select Advanced options. 
 <img src="https://www.asustor.com/images/tinymce/upload_img_20240325161053_Win11pptp06.png" alt="" width="800" height="648" /> STEP 6 
Select Edit in More VPN properties.
 
<img src="https://www.asustor.com/images/tinymce/upload_img_20240325161209_Win11pptp07.png" alt="" width="791" height="636" />
 STEP 7
Select the Security tab, enable Allow these protocols and choose either PAP and/or MS-CHAP v2 as the protocols for your VPN server. Click OK to apply settings.<o:p></o:p>
<img src="https://www.asustor.com/images/tinymce/upload_img_20240325161314_Win11pptp08.png" alt="" width="405" height="488" /> STEP 8
To connect, head to Network & Internet and click on VPN. Select a VPN profile and press connect. <img src="https://www.asustor.com/images/tinymce/upload_img_20240325161324_Win11pptp09.png" width="800" height="646" alt="" /> 
<a name="2.1.2"></a>2.1.2 Connecting using Windows 10
 STEP 1 
Click the [Network] icon on the bottom right-hand side of the system tray and select [Network Settings].
<img src="https://www.asustor.com/images/kindeditor/image/20160303/20160303131444_21881.jpg" alt="" /> STEP 2 
Select [VPN] from the left panel, and click [Add a VPN connection].
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408101824_28303.jpg" alt="" /> STEP 3 
Select Windows (built-in) in [VPN Provider] field. Type in the name for this VPN connection and enter the WANl IP address of your ASUSTOR NAS into the [Server name or address] field. Choose PPTP as the [VPN Type], enter the username/password in the appropriate fields, and click [Save].
<img src="https://www.asustor.com/images/tinymce/20211026062618_WAN IP.png" width="800" height="483" alt="" /> 
<img src="https://www.asustor.com/images/tinymce/20211026071535_WIN 10 PPTP.png" alt="" width="738" height="800" />

STEP 4 
Now you can see that the newly created VPN connection has appeared. To specify the authentication protocol, please click [Change adapter options].
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408101825_85458.jpg" alt="" /> 
Right click on the VPN connection and select [Properties].
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408101825_61616.jpg" alt="" /> STEP 5 
Select the [Security] tab, check the [Allow these protocols] option, then choose the same protocol (PAP or MS-CHAP v2) as the VPN server on your ASUSTOR NAS. Click [OK] to save the settings.
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408101828_68266.jpg" alt="" /> STEP 6 
To establish the VPN connection, go to the Windows [NETWORK & INTERNET] > [VPN] page, select an existing VPN profile and click [Connect].
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408101828_33231.jpg" alt="" /> <a name="2.2"></a>2.2 Connecting to your VPN server via OpenVPN <a name="2.2.1"></a>2.2.1 Connecting using Windows 11 STEP 1 Download and install the OpenVPN program from the OpenVPN website. <img src="https://www.asustor.com/images/tinymce/upload_img_20240418111007_OpenVPN_01.png" alt="" width="800" height="417" title="" align="" /> STEP 2 Extract the OpenVPN configuration file that you have downloaded from your ASUSTOR NAS’s VPN server (see section 3.2). Open the [asustor.ovpn] file, change the IP address for the VPN server and then save the changes. In the graphic below, we have changed the IP address of the VPN server to WANl IP 172.16.2.102. 
<img src="https://www.asustor.com/images/tinymce/20211026063751_WAN%20IP%20172.16.2.102.png" width="800" height="482" alt="" />
 
<img src="https://www.asustor.com/images/tinymce/upload_img_20240418112013_2.png" alt="" width="659" />
 STEP 3 
Open [OpenVPN Connect] and import asustor.OVPN.

<img src="https://www.asustor.com/images/tinymce/upload_img_20240418112206_4.png" alt="" width="400" height="685" />
 
STEP 4 Enter the username and password for your ASUSTOR NAS VPN server and then click on [Connect]. <img src="https://www.asustor.com/images/tinymce/upload_img_20240418112313_5.png" alt="" width="400" height="685" /> STEP 5 
After successfully connecting, you should be able to see that the OpenVPN GUI icon in your system tray has turned green. You should now be able to access your ASUSTOR NAS using Windows.

<img src="https://www.asustor.com/images/tinymce/upload_img_20240418112242_6.png" alt="" width="353" height="170" />
 
<a name="2.2.2"></a>2.2.2 Connecting using a Mac STEP 1 Download <a href="http://code.google.com/p/tunnelblick/" target="_blank" rel="noopener">tunnelblick</a>. <img src="https://www.asustor.com/images/kindeditor/image/20160303/20160303132605_54918.png" alt="" width="800" height="493" title="" align="" /> STEP 2 
Install [Tunnelblick].
 
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408102933_10035.png" alt="" />

After installation, click on [Launch].
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408102935_91578.png" alt="" />

STEP 3 
Click on [I have configuration files].
 <img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408102937_75830.png" alt="" /> 
If you have already download the configuration file from your ASUSTOR NAS’s VPN server, click on [OpenVPN Configuration(s)].
 <img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408102939_53367.png" alt="" /> 
You should now be able to see the newly created [Empty Tunnelblick VPN Configuration] folder on your desktop. Copy the configuration file from your ASUSTOR NAS’s VPN server to this folder.
 <img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408102941_59503.png" alt="" /> 
Open the [asustor.ovpn] file and then change the WANl IP address for your ASUSTOR NAS VPN server.<img src="https://www.asustor.com/images/tinymce/20211026062618_WAN IP.png" width="800" height="483" alt="" />
 <img src="https://www.asustor.com/images/tinymce/20211026064441_macOS OPENVPN.png" alt="" width="670" height="443" /> 
After saving the changes to the file, change the name of the folder to “ASUSTORVPN.tblk”.
 <img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408102945_67352.png" alt="" /> 
Tunnelblick VPN configurations should have now been installed successfully.
 <img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408102947_35045.png" alt="" /> STEP 4 
From the Mac menu bar, click on the [Tunnelblick] icon and then select [Connect ASUSTORVPN].
 <img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408102949_25490.png" alt="" /> STEP 5 
After successfully connecting, you will be able to see the connection status and time in the menu bar as shown in the graphic below.
 <img src="https://www.asustor.com/images/kindeditor/image/20160408/20160408103433_33741.png" alt="" /> <a name="2.3"></a>2.3 Configuring the gateway and routing for the VPN client When using a VPN client, the system will automatically forward your VPN server’s default gateway. Under these circumstances, you will not be able to connect to the Internet. Therefore, we must change the VPN gateway and routing in order to connect to the Internet.
 <a name="2.3.1"></a>2.3.1 Configurations using Windows 7 STEP 1
Right-click on your VPN connection and then select [Properties]. Select [Internet Protocol Version 4 (TCP/IPv4)] and then click on [Properties].
 <img src="https://www.asustor.com/images/kindeditor/image/20160303/20160303133111_44703.png" alt="" /> STEP 2 
Click on [Advanced…].
 <img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408103601_55814.png" alt="" /> STEP 3 
Uncheck the [Use default gateway on remote network] checkbox.
 <img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408103602_12820.png" alt="" /> <a name="2.3.2"></a>2.3.2 Configurations using Windows 10 STEP 1 
Click the Windows icon on the bottom left-hand side of the taskbar, select [All apps] from the list, and scroll down to find [Windows Powershell]. Click on it to execute the program.
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408103602_93745.jpg" alt="" /> STEP 2 Issue the ”Get-VpnConnection” command to list the information of your existing VPN connections. 
By default, the value of the SplitTunneling parameter is False, which means all network traffic of this VPN client will be forwarded to the VPN server’s gateway.
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408103603_17387.jpg" alt="" /> STEP 3 Issue the “Set-VpnConnection -Name “ASUSTOR VPN" -SplitTunneling $True” command to change the value of the SplitTunneling parameter to True. 
Note: The “ASUSTOR NAS” string in the example above must be replaced to your own VPN connection name.
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408103603_17536.jpg" alt="" /> STEP 4 
Issue the ”Get-VpnConnection” command again to verify that the change has been made successfully.
<img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408103605_13890.jpg" alt="" />
 
<a name="2.3.3"></a>2.3.3 Configurations using a Mac
 STEP 1 
Open [Terminal] and then enter the command “ifconfig-a”. You will now be able to see your VPN server’s IP address. Note that the Mac operating system only provides this gateway for connecting to a VPN server and cannot connect to the Internet. Therefore, we will have to manually enter the IP address for the ASUSTOR NAS.
 <img src="http://www.asustor.com/images/kindeditor/image/20160408/20160408103605_58761.png" alt="" /> STEP 2 Please replace either 10.0.1.6 or 10.0.1.5 with the WANl IP address of the ASUSTOR NAS. Executing the commands below will allow you to connect to the Internet. 
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0" style="border: none;">
<tbody>
<tr>
<td width="597" style="border: solid #78C0D4 1.0pt; background: #D2EAF1;">
sudo route add –net 123.51.123.123/16 10.0.1.6
OR
sudo route add –net 123.51.123.123/16 10.0.1.5
</td>
</tr>
</tbody>
</table>
 <img src="https://www.asustor.com/images/tinymce/20211026062618_WAN IP.png" width="800" height="483" alt="" /> 
<a name="2.4"></a>2.4 Connecting to your VPN server via L2TP/IPsec <a name="2.4.1"></a>2.4.1 Connecting using Windows 7 If you are using an ASUS router, please manually open port 500,4500,1701 under port forwarding. Some other routers might have to do a similar procedure. From the router configuration interface, select [WAN] > [Virtual Server / Port Forwarding] tab > [Port Forwarding List]. Add a new item to the Port Forwarding list by entering the following information: Service Name: A name of your choice Port Range:  500,4500,1701 Local IP: Your NAS’s IP address Local Port: 500,4500,1701 Protocol: UDP Click on the [Add] button after you have entered all the information. Port 500 should now be opened. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119170200_20066.png" alt="" /><img src="https://www.asustor.com/images/tinymce/20211026061303_L2TP Router.png" width="691" height="228" alt="" /> STEP 1 In Windows, go to [Control Panel] > [All Control Panel Items] > [Network and Sharing Center] and then click on [Set up a new connection or network]. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119171119_23958.png" alt="" /> STEP 2 Select [Connect to a workplace] then click [Next]. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119173146_50253.png" alt="" /> STEP 3 Select [No, create a new connection] and then click [Next]. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119173239_78960.png" alt="" /> STEP 4 Select [Use my Internet connection (VPN)] <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119173420_31276.png" alt="" /> STEP 5 In the [Internet address:] field enter your ASUSTOR NAS’s WAN IP address or domain address. <img src="https://www.asustor.com/images/tinymce/20211026062618_WAN IP.png" width="800" height="483" alt="" /> <img src="https://www.asustor.com/images/tinymce/20211026064951_L2TP WAN win7.png" alt="" width="643" height="475" /> STEP 6 Enter your [User name] and [Password] and then click on [Connect]. You will now be able to access the local network resources on your ASUSTOR NAS via Windows. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119174029_68757.gif" alt="" /> Note: If you are unable to connect to the VPN Server, please ensure that the [VPN Settings] and [VPN Server] settings are identical. Using the graphic below as an example, we check that the [Type of VPN] is L2TP/IPSec, that the data encryption method is either PAP or MS-CHAP v2 and that [Allow these protocols] radio button has been selected. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119174506_39643.png" alt="" /> STEP 7 Click on [Start] and run “regedit”. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119174825_28578.png" alt="" /> STEP 8 Navigate to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesPolicyAgent and then right click and select [New] > [DWORD (32 bit) Value]. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119175238_23424.png" alt="" /> STEP 9 For the Value name enter “AssumeUDPEncapsulationContextOnSendRule”and set the Value data to “2” and then click [OK]. Restart your computer. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119175342_22510.png" alt="" /> STEP 10 After restarting your computer, go to [Control Panel] > [Network and Internet] > [Network Connections] to see that your new connection is successful. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119175743_66990.png" alt="" /> <a name="2.4.2"></a>2.4.2 Connecting using Windows 10
 If you are using an ASUS router, please manually open port 500,4500,1701 under port forwarding. Some other routers might have to do a similar procedure. From the router configuration interface, select [WAN] > [Virtual Server / Port Forwarding] tab> [Port Forwarding List]. Add a new item to the Port Forwarding list by entering the following information: Service Name: A name of your choice Port Range:  500,4500,1701 Local IP: Your NAS’s IP address Local Port: 500,4500,1701 Protocol: UDP Click on the [Add] button after you have entered all the information. Port 500 should now be opened. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119181301_94501.jpg" alt="" /> <img src="https://www.asustor.com/images/tinymce/20211026061303_L2TP Router.png" width="691" height="228" alt="" /> STEP 1 Click on the [Network] icon in the system tray and then click on [Open Network and Sharing Center]. <img src="https://www.asustor.com/images/kindeditor/image/20170123/20170123142851_85397.png" alt="" /> STEP 2 Click on [Set up a new connection or network]. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119181630_88985.png" alt="" /> STEP 3 Select [Connect to a workplace] then click [Next]. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119181659_88510.png" alt="" /> STEP 4 Click on [Use my Internet connection (VPN)]. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119181743_71783.png" alt="" /> STEP 5 Enter the Internet address from WAN IP of NAS, Destination name and then select the [Allow other people to use this connection] checkbox. Click on [Create] once you are done. <img src="https://www.asustor.com/images/tinymce/20211026062618_WAN IP.png" width="800" height="483" alt="" /> <img src="https://www.asustor.com/images/tinymce/20211026065434_L2TP win10.png" alt="" width="613" height="458" /> STEP 6 Click on [Change adapter settings]. Right-click on the VPN connection that you have just created and select [Properties]. Click on the [Security] tab and change the [Type of VPN] to L2TP/IPsec. Click on [Advanced settings], make sure the [Use preshared key for authentication] radio button is selected and then enter your key (Your key can be found from the ADM interface by selecting [VPN Server] > [Settings] > [L2TP]). Click on [OK] once you are done. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119182210_68218.png" alt="" /> STEP 7 Click on [Start] and run “regedit”. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119182416_69310.png" alt="" /> STEP 8 Navigate to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesPolicyAgent and then right click and select [New] > [DWORD (32 bit) Value]. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119182648_16767.png" alt="" /> STEP 9 For the Value name enter “AssumeUDPEncapsulationContextOnSendRule”and set the Value data to “2” and then click [OK]. Restart your computer. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119182756_29406.png" alt="" /> <a name="2.4.3"></a>2.4.3 Connecting using a Mac If you are using an ASUS router, please manually open port 500,4500,1701 under port forwarding. Some other routers might have to do a similar procedure. From the router configuration interface, select [WAN] > [Virtual Server / Port Forwarding] tab > [Port Forwarding List]. Add a new item to the Port Forwarding list by entering the following information: Service Name: A name of your choice Port Range:  500,4500,1701 Local IP: Your NAS’s IP address Local Port: 500,4500,1701 Protocol: UDP Click on the [Add] button after you have entered all the information. Port 500 should now be opened. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119181301_94501.jpg" alt="" /> <img src="https://www.asustor.com/images/tinymce/20211026061303_L2TP Router.png" width="691" height="228" alt="" /> STEP 1 Click on the [Apple] icon and then select [System Preferences…].
<img src="https://www.asustor.com/images/tinymce/20211019104641_Screen%20Shot%202021-10-19%20at%205.33.03%20PM.png" alt="" width="300" height="384" />
 STEP 2 Click on [Network].
<img src="https://www.asustor.com/images/tinymce/20211022062922_Screen Shot 2021-10-22 at 2.15.54 PM.png" alt="" width="750" height="653" /> STEP 3 Click on the + button, select [VPN] for “Interface:”, [L2TP Over IpSec] for “VPN Type”, enter a Service Name and then click on [Create]. <img src="https://www.asustor.com/images/tinymce/20211022065830_Screen Shot 2021-10-22 at 2.30.23 PM.png" alt="" width="800" height="706" /> STEP 4 Enter your [Server Address (Your NAS WANIP like here:123.51.123.123)] and [Account Name]. Click on [Authentication Settings…] and enter the User Account Password and Shared Secret (The Shared Secret is the key that can be found from the ADM interface by selecting [VPN Server] > [Settings] >[L2TP]).
<img src="https://www.asustor.com/images/tinymce/20211026065940_macL2TP WAN.png" alt="" width="800" height="706" /> <img src="https://www.asustor.com/images/tinymce/20211026062618_WAN IP.png" width="800" height="483" alt="" /><img src="https://www.asustor.com/images/tinymce/20211022065211_L2TP.png" alt="" width="800" height="485" />Click [OK] and then click on [Connect].<img src="https://www.asustor.com/images/tinymce/20211022070106_Screen Shot 2021-10-22 at 2.42.17 PM.png" alt="" width="800" height="706" />
 STEP 5 Enter the VPN Server account name and password and then click on [OK]. <img src="https://www.asustor.com/images/tinymce/20211022070138_Screen Shot 2021-10-22 at 2.38.29 PM.png" alt="" width="800" height="498" /> STEP 6 After successfully connecting, you will be able to access the resources on your ASUSTOR NAS local network. If you wish to disconnect the VPN connection, you can click on the [Disconnect] button. <img src="https://www.asustor.com/images/tinymce/20211026070125_DS L2TP.png" alt="" width="800" height="706" /> <a name="2.4.4"></a>2.4.4 Connecting using an Android device STEP 1 Select [Settings]>[More] > [VPN]. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119192204_52150.png" alt="" /> <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119192224_61547.png" alt="" /> STEP 2 Click on [Add VPN profile], enter a name of your choice, select [L2TP/IPSEC PSK] for “Type” and enter your NAS’s IP address or URL into the [Server Address] field. Choose an encryption method and then select [Save] to complete configurations. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119192306_58988.png" alt="" /> STEP 3 Select the created VPN profile. After entering the username and password, select [Connect] to create the VPN connection. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119192353_50474.png" alt="" />
 
After creating the connection, selecting the profile again will allow you to view the associated information for the connection. <img src="https://www.asustor.com/images/kindeditor/image/20170119/20170119192449_68682.png" alt="" /> 
<a name="2.4.5"></a>2.4.5 Connecting using an iOS device The configurations in the following example were done using an iPhone 6. STEP 1 In iOS, select [Settings] >[General] > [VPN]. STEP 2 Select [Add a VPN configuration…] and then enter the following information: Type: L2TP Description: A description of your choice Server: Your NAS’s WAN IP address or URL Account: Your account name Password: The password for the account Secret: They key that can be found in ADM interface by selecting [VPN Server]> [Settings]>[L2TP] Once you have finished entering the information select [Done]. <img src="https://www.asustor.com/images/tinymce/20211026074313_L2TP ios.png" width="500" height="1082" alt="" /> <img src="https://www.asustor.com/images/tinymce/20211026062618_WAN IP.png" width="800" height="483" alt="" /> STEP 3 After completing the VPN profile you can select the status toggle to activate the VPN connection.
<img src="https://www.asustor.com/images/tinymce/20211026075430_IMG_3347.PNG" alt="" width="400" height="866" />
 
<a name="25"></a>2.5 Connecting to your VPN Server via WireGuard VPN <a name="251"></a>2.5.1 Connecting using Windows 10 or 11 STEP 1 
Visit the WireGuard official website to download and install the WireGuard client. Once installed, click on the dropdown menu and click Add Tunnel and select Add empty tunnel.
<img src="https://www.asustor.com/images/tinymce/upload_img_20240418120700_2.png" width="671" height="560" alt="" /> STEP 2 
<div>
<div>
<div>Copy the public key and paste it into the public key field of Step 3 in section 1.4. Manually enter the following inside the tunnel editor and confirm the connection:</div>
<div>[Interface]</div>
<div>PrivateKey = Automatically generated by WireGuard (Windows tool)</div>
<div>Address = 10.0.4.3/24 (Consistent with the IP addresses set in WireGuard Peer settings)</div>
<div>DNS = 8.8.8.8</div>
</div>
<div></div>
<div>[Peer]</div>
<div>PublicKey = Public key of WireGuard from VPN Server preferences</div>
<div>AllowedIPs = 0.0.0.0/0</div>
<div>Endpoint = Your NAS IP as the VPN Server:51820</div>
<div>PresharedKey = Preshared key generated for the specific peer in VPN Server</div>
</div>
<div><img src="https://www.asustor.com/images/tinymce/upload_img_20240418121202_WGWin11_2fix2.png" width="1200" height="410" alt="" /></div>
 
STEP 3 Click Activate and check traffic information in the last item to confirm if a connection with WireGuard has been made.
<img src="https://www.asustor.com/images/tinymce/upload_img_20240418121321_WGWin11_3fix.png" width="668" height="519" alt="" /> 
<a name="252"></a>2.5.2 Connecting using a Mac STEP 1 
Visit the WireGuard official website to download and install the WireGuard client. Once installed, click on the dropdown menu and click Add Tunnel and select Add empty tunnel.
<img src="https://www.asustor.com/images/tinymce/upload_img_20240419141346_2.png" width="685" height="473" alt="" /> STEP 2 
<div>
<div>
<div>Copy the public key and paste it into the public key field of Step 3 in section 1.4. Manually enter the following inside the tunnel editor and confirm the connection:</div>
<div>[Interface]</div>
<div>PrivateKey = Automatically generated by WireGuard (Windows tool)</div>
<div>Address = 10.0.4.3/24 (Consistent with the IP addresses set in WireGuard Peer settings)</div>
<div>DNS = 8.8.8.8</div>
</div>
<div></div>
<div>
<div>[Peer]</div>
<div>PublicKey = Public key of WireGuard from VPN Server preferences</div>
<div>AllowedIPs = 0.0.0.0/0</div>
<div>Endpoint = Your NAS IP as the VPN Server:51820</div>
<div>PresharedKey = Preshared key generated for the specific peer in VPN Server</div>
</div>
</div>
<div></div>
<div><img src="https://www.asustor.com/images/tinymce/upload_img_20240419142929_WGMAC_02.png" width="1200" height="372" alt="" /></div>
<div style="font-weight: bold;"> STEP 3 Press [Allow] to connect to the WireGaurd VPN. <img src="https://www.asustor.com/images/tinymce/upload_img_20240419141327_6.png" width="220" height="201" alt="" /> </div>
STEP 4 Click Activate and check traffic information in the last item to confirm if a connection with WireGuard has been made. <img src="https://www.asustor.com/images/tinymce/upload_img_20240419141235_7.png" width="727" height="486" alt="" /> <a name="253"></a>2.5.3 Connecting using an iOS device STEP 1 Install WireGuard in App Store, open it and click Create fron scratch. <img src="https://www.asustor.com/images/tinymce/upload_img_20240419141632_438032600_1023406432794070_5367039018097946267_n.jpg" width="400" height="867" alt="" /> STEP 2 Enter the name and generate a key pair, and paste the public key into the public key field of the WireGuard Peer created in Step 3 of 1.4. Then enter the address, public key from VPN Server, preshared key, NAS IP, and other information. To allow packets from any IP subnet, enter 0.0.0.0/0. Click Save when you are finished. <img src="https://www.asustor.com/images/tinymce/upload_img_20240419142221_2.png" width="400" height="867" alt="" /> STEP 3 Tap the connection switch you just set to use WireGuard VPN for iOS. <img src="https://www.asustor.com/images/tinymce/upload_img_20240419142706_438238282_334489586314270_975539452296937980_n.jpg" width="400" height="201" alt="" /> 
<a name="254"></a>2.5.4 Connecting using an Android device STEP 1 Install WireGuard in Google Play, open it and click Create fron scratch. <img src="https://www.asustor.com/images/tinymce/upload_img_20240506151228_2.png" width="400" height="889" alt="" /> STEP 2 Enter the name and generate a key pair, and paste the public key into the public key field of the WireGuard Peer created in Step 3 of 1.4. Then enter the address, public key from VPN Server, preshared key, NAS IP, and other information. To allow packets from any IP subnet, enter 0.0.0.0/0. Click Save when you are finished. <img src="https://www.asustor.com/images/tinymce/upload_img_20240506151312_4.png" width="400" height="889" alt="" /> STEP 3 Tap the connection switch you just set to use WireGuard VPN for Android. <img src="https://www.asustor.com/images/tinymce/upload_img_20240506151432_WGAndroid3.png" width="400" height="889" alt="" />
 <hr />
<h3>Learn More</h3>
<iframe width="560" height="315" src="https://www.youtube.com/embed/21XwC9Z4wvA?si=idInKoRsm1h1LMc7" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="allowfullscreen"></iframe>
<iframe width="560" height="315" src="https://www.youtube.com/embed/iOU5auuTOsI?si=z5PEEjOuH8picgUQ" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="allowfullscreen"></iframe>
<iframe width="560" height="315" src="https://www.youtube.com/embed/9g_wxR-TZnA?si=HlgCosxmXqT18geZ" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="allowfullscreen"></iframe>

Publish: