Tutorial Configure Private Internet Access VPN On A Synology NAS

[FallenLondon]

To answer my own question from:

You must be registered to see the links

: yes we can! Here's a tutorial for people that want to configure a VPN on their NAS.

Starting assumptions:
Your NAS runs DSM 6+
You don't need to access your NAS from the Internet.
You have an account from Private Internet Access.

1. Download the configuration files and certificates from

You must be registered to see the links

and unpack it.

2. Open the Network applet on your Synology from the control panel.

3. Select Network Interface in Network, click create, choose Create VPN profile

4. Choose OpenVPN (via importing a .ovpn file) and click Next.

5. Fill in a name for your new connection, and fill in the username and password you got from Private Internet Access when you created your account. Click Browse to Import your ovpn file next.

6.Select one from the folder where you extracted the zip-file from step 1. Usually close to home is better for performance, but there might be reasons to make your connections appear from another country. I'll use Brazil as an example.

7. Choose the certificate ca.rsa.2048.crt. Do yourself a solid and configure explorer to always show extensions.

8. Open Advanced Options.
View attachment 2033
9. Leave everything blank except, and this is vital, the Certificate Revocation. You won't be able to connect if you don't do that. So click browse and choose crl.rsa.2048.pem.
<continued in next post because of file limit>

 

[FallenLondon]

10. Your profile should look like this (no client key or certificate, no tls-auth key). Click Next if you're satisfied.

11. Check "Use default gateway on remote network (if you don't this exercise is completely futile), and "Reconnect when the VPN connection is lost". The latter one is for your convenience. Click Apply to create the new connection. Choose the middle one only if you can explain to a systems engineer why you need it and why it is going to work.

12. RMB on your new connection and choose connect.


If you did everything correctly all traffic originating from your NAS will be routed through the VPN. Assuming you selected Use default gateway on remote network. If you didn't, disconnect and edit.

Important: how to check if it works? You can download a torrentfile to test this.

Visit

You must be registered to see the links

.

Scroll down a bit until you find the section Torrent Address Detection. Click Activate.


Ipleaks.net will generate a magnet link for you. Copy that link (don't click on it, we're not testing your PC now).

Import the magnet link in Download Station

Enter the URI and click OK.

Go back to the browser on your PC. The Torrent Address detection will show another IP address than the one in the section Your IP address.

And that's all. This should work pretty much on all NAS-devices, but I can't assist you with that. And, as mentioned before, if you're using the NAS to deliver Internet services VPN isn't a good fix.

 

[FallenLondon]

Something is going horribly wrong with the inline images. Can a mod sort that out please? Cause every attempt I make to fix it only makes it worse.