What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
To let a phone or computer securely reach your Synology NAS while away, install VPN Server from DSM’s Package Center, configure a server protocol, forward its required ports to the NAS, and connect with a matching client profile. If you instead want the NAS itself to connect through an outside VPN, use DSM’s VPN profile settings; that is a separate setup.
Choose the kind of VPN setup you need
A Synology NAS can participate in a VPN in two different ways:
As an Amazon Associate I earn from qualifying purchases.
- NAS as a VPN server: A remote device connects to your NAS, then can access the NAS or, if configured, other devices on your home network. The steps below focus on this use.
- NAS as a VPN client: The NAS connects out to a VPN server using a profile. This routes the NAS’s connection through that VPN endpoint; it does not set up remote access into your home network.
Synology documents the client workflow under Control Panel > Network > Network Interface > Create > Create VPN profile. A NAS cannot act as both an L2TP or OpenVPN client and server using the same protocol at the same time. Synology’s DSM VPN client help describes the client setup and limitation.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesWhat you need before setting up the server
- A Synology NAS running DSM and an administrator account. Administrator privileges are needed to install and configure VPN Server.
- Internet access for the NAS and a public IP address or domain name that remote clients can reach.
- Access to your router and any relevant firewall settings. Remote connections generally require forwarding the VPN protocol’s ports from the router to the NAS. The exact router procedure depends on its model and network layout.
Install VPN Server from Package Center, then open the package to configure it. Synology’s VPN Server setup tutorial covers DSM 7 and legacy DSM; screens and labels can vary by version.
#1 Best Overall
- Your Personal Streaming Server - Build your own Netflix-style media library and stream 4K movies, shows and photos to any device without monthly fees
- Create Your Own Cloud - Store your entire photo, video and music collection; access from anywhere with fast 282 MB/s transfer speeds
- Creator-Grade Backup Solution - Protect your irreplaceable content with automated backups to cloud services, external drives and remote NAS
- Multi-Layered Data Protection - Combine RAID redundancy, automated backups and snapshot technology to prevent data loss from any cause
- Smart Home Surveillance - Support up to 30 IP cameras with AI detection, instant alerts and secure remote monitoring
Choose a server protocol
Synology’s VPN Server documentation lists PPTP, OpenVPN, and L2TP/IPSec. Its setup tutorial recommends OpenVPN or L2TP/IPSec over PPTP for connection security. Use a protocol supported by your remote devices, and configure the NAS and each client to use the same one. Protocol availability and client screens can vary across software versions.
| Protocol | Synology’s documented default ports | Client setup example |
|---|---|---|
| OpenVPN | UDP 1194 | Import an exported configuration profile, then connect with suitable credentials. |
| L2TP/IPSec | UDP 1701, 500, and 4500 | Enter the server address, DSM username and password, and pre-shared key. |
These port values are Synology’s documented defaults; if you change a port or transport setting on the NAS, the router and firewall rules must match the configured values. Synology says enabling VPN service affects the NAS’s network performance, but its reviewed help does not provide a throughput figure or comparative speed results. See Synology’s VPN Server help.
Rank #2
- Secure private cloud - Enjoy 100% data ownership and multi-platform access from anywhere
- Easy sharing and syncing - Safely access and share files and media from anywhere, and keep clients, colleagues and collaborators on the same page
- Automated Backup Protection - Set-and-forget backups for Macs, PCs and mobile devices to multiple destinations including cloud and external drives
- Home Security System - Record and monitor your property 24/7 with support for multiple IP cameras and remote viewing
- 2-Year Warranty - Reliable hardware backed by Synology's expert customer support team and ongoing software updates
Configure VPN Server on the NAS
- Open VPN Server from DSM’s main menu.
- Choose OpenVPN or L2TP/IPSec in the package, enable that service, and review its settings.
- Set the VPN client address range. Choose a range that does not overlap with your home LAN or networks clients may already use; overlapping addresses can prevent routing from working correctly.
- Set connection limits and authentication options appropriate to your use. For OpenVPN, review the port and transport protocol, encryption and authentication settings, and enable LAN access if remote users need to reach devices beyond the NAS.
- Apply the configuration. Record the protocol, port, authentication details, and any pre-shared key needed to configure clients.
Use the options available in your DSM version, and ensure the client’s authentication and encryption settings match the server. Synology’s VPN Server settings reference explains the available server controls.
Forward ports and check firewalls
On your router, forward the ports for the protocol you enabled to the NAS’s local IP address. Permit the same traffic in any firewall between the internet and the NAS. Synology documents UDP 1194 as the OpenVPN default and UDP 1701, 500, and 4500 for L2TP/IPSec; your actual rules must follow the settings on your NAS.
Rank #3
- 【Advanced Home Data & Media Hub】For advanced home users who need phone backup, file storage, and centralized data management. Centralize family photos, 4K videos, movies, computer backups, and personal files in one place while running multiple apps for home entertainment and everyday data management. Suitable for households with growing digital libraries and multiple NAS use cases.
- 【Built for Creators, Media Servers & Advanced Apps】Powered by the Intel N100 Quad-Core CPU, 8GB DDR5 RAM, 2.5GbE networking, and dual M.2 NVMe slots, DXP2800 handles large files and heavier workloads with ease. Run Docker, virtual machines, and media server applications compatible with Plex—ideal for content creators, tech enthusiasts, and advanced home users managing 4K videos, RAW photos, personal media libraries, and multiple NAS apps.
- 【Up to 80TB for Growing Digital Libraries】 Supports up to 80TB of storage using two HDD bays and two M.2 NVMe SSD slots for family photos, movies, RAW photos, 4K videos, work files, and device backups. AI photo management supports recognition of people, objects, scenes, and locations, album organization, and duplicate photo detection. HDDs and SSDs are not included.
- 【AI-powered Home Surveillance】Turn DXP2800 into a centralized home surveillance hub by connecting compatible network cameras and storing recordings locally on your NAS. AI-powered features include Face Recognition, People Detection, and Pet Detection, helping advanced home users review important events more efficiently while managing home surveillance and personal data in one place.
- 【One data Center Across Your Devices】Keep files from desktops, laptops, phones, tablets, and other devices together instead of scattered across cloud accounts and external drives. Access, back up, organize, and share data across Windows, macOS, Android, iOS, web browsers, and compatible smart TVs—ideal for creators and advanced home users working across multiple devices.
Remote clients also need the NAS’s reachable public IP address or domain name. A correct VPN configuration will not be reachable from outside if the endpoint, forwarding, or firewall rules are wrong. Synology’s setup tutorial walks through the server and network configuration.
Export a profile and connect a remote device
OpenVPN
- In VPN Server, export the OpenVPN configuration file.
- Open the exported profile and replace its placeholder server address with your NAS’s public IP address or domain name, if required by the file.
- Transfer the profile securely to the remote device and import it into an OpenVPN-compatible client. Enter the credentials configured for VPN access when prompted.
- Connect and confirm that the client reports an active VPN connection.
Synology’s iOS example imports the exported configuration into OpenVPN Connect. That tutorial uses iOS 13, so current iOS screens may differ; other operating systems have their own client import steps. See Synology’s iOS VPN connection guide.
Rank #4
- Professional Video Editing Hub - Edit 4K and 8K footage directly over network with blistering 1,181 MB/s speeds; support multiple editors working simultaneously
- Massive Media Library - Start with 100TB, expand to 300TB using DX525 units as your video projects, RAW photos and audio libraries grow
- 10GbE Network Ready - Upgrade to 10-Gigabit networking for post-production teams working on shared high-resolution projects
- Advanced Media Management - Stream content to clients organize thousands of assets with AI tagging and maintain project version control
- 3-Year Warranty & Enterprise Support - Dedicated technical account management is available for business-critical production environments
L2TP/IPSec
Create an L2TP/IPSec VPN connection on the remote device using the NAS public address or domain name, the DSM username and password, and the pre-shared key configured on the NAS. Synology’s iOS example uses those details; other operating systems present their own setup screens. The router must forward the L2TP/IPSec ports listed above.
Free tools Windows power users keep installed
One-click scans. No signup required.
Reach the NAS and use SMB over the VPN
Once the remote device is connected, use the NAS’s VPN-side address to reach it. If you enabled LAN access, you can also try reaching other devices on the home network. For file sharing, connect to SMB only after the VPN is active; do not expose SMB/CIFS ports directly to the internet.
Best Value
- One Place for All Your Data - Consolidate scattered files from multiple computers, phones and external drives into one accessible hub with 100% ownership
- Professional File Collaboration - Share projects with clients, sync documents across teams and maintain version control without Dropbox fees
- Automated Backup Protection - Set-and-forget backups for Macs, PCs and mobile devices to multiple destinations including cloud and external drives
- DIY Surveillance System - Transform IP cameras into a professional monitoring solution with motion alerts, recording schedules and remote viewing
- 2-Year Warranty - Reliable hardware backed by Synology's expert customer support team and ongoing software updates
If the client cannot resolve the NAS’s server name, use the VPN-assigned dynamic IP address instead. Synology’s SMB-over-VPN guide explains this approach and advises against exposing SMB ports to the internet.
Troubleshoot a connection that fails
- Check the endpoint: Make sure the profile or client uses the current public IP address or domain name, not the NAS’s private LAN address.
- Check forwarding and firewalls: Confirm the selected protocol’s ports are forwarded to the NAS and permitted through applicable firewalls. The router’s target address must still point to the NAS.
- Match client and server settings: Verify the selected protocol, credentials, and authentication or encryption settings. Synology notes that mismatched authentication or encryption settings can prevent a connection.
- Check for overlapping subnets: The VPN client address range should not conflict with the NAS’s LAN or the remote client’s local network.
- Try the VPN address for file access: If the VPN connects but the NAS name does not resolve for SMB, use the VPN-assigned address.
- Reduce MTU if the connection is unstable: Synology suggests lowering MTU in complex network environments when timeouts or instability occur.
- For OpenVPN on iOS, inspect the profile: Ensure its placeholder server address was replaced with the NAS’s public IP address or domain name.
Synology’s VPN Server help covers settings and connection considerations.
If the NAS should connect to an outside VPN
For the client use case, open Control Panel > Network > Network Interface > Create > Create VPN profile, choose a supported profile type, and enter the connection details provided by the VPN server operator. This configures the NAS to connect outward; it does not replace VPN Server when your goal is to connect remotely into your home network. Synology also states that the NAS cannot run an L2TP or OpenVPN client and server concurrently using the same protocol. See Synology’s DSM VPN client help.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
