How do I access my NAS from anywhere?
Good day,
I bought the QNAP TS-233 NAS to access my data from anywhere. When my iPhone or laptop is connected to the home network, I can access my data. As soon as I'm connected to the mobile network, I get an error message stating that there's a connection error.
How can I change this? Where can I find the settings?
Please provide step by step instructions.
It is practical idea that you want to make your QNAP TS-233 NAS accessible from anywhere. However, it is important to keep in mind the security as a direct release of ports to the Internet can represent a significant security gap.
Here is a safe way to access your NAS from the road without jeopardising security:
1. Use no port forwarding to the Internet
The opening of ports for direct access via the Internet (e.g. via Port 8080 or 443) is often seen as a simple solution, but involves great risks. Cyber attacks on NAS systems have become more common in the past, and released ports provide a potential attack point. Depending on the provider, you do not have a public IP address that you can access.
The cloud access options of NAS manufacturers have also been increasingly used for attacks – even ransomware – and are therefore not recommended.
Two. Set instead VPN (Virtual Private Network)
The most secure way to access your NAS from anywhere is to set up a VPN. You’ll connect remotely with your home network as if you were home. Here is a simple guide:
Step 1: Set up VPN on your router or QNAP
Step 2: Configuring VPN servers
Step 3: Set up VPN on your device
Step 4: Connecting
Conclusion
Instead of accessing your NAS directly via the Internet, a VPN protects your data and provides a safe way to access it from the road. Creating a VPN may seem a bit complicated at the first moment, but it is the safest solution to protect your data from attacks.
Of course, your phone and NAS are no longer in the same network.
Your cell phone would have to address the public IP of your router at this point and you need to inform your router that requests are forwarded from the outside to your NAS on the corresponding port.
But you also need to protect your NAS with access data, otherwise everyone could have access to your data.
Alternatively, you can also install a VPN endpoint. This also needs a port forwarding in router. Once you connect to the VPN, your phone is back on the same network as your NAS.
Yes my NAS protected with a password.
And how do I share this with my router?
How does this work with the VPN endpoint? will it be installed on the NAS or do I need a provider?
Thank you.
You go to the settings of your router under port forwarding, then you can set that enquiries should be forwarded from outside to port xxx to the IP address from your Nas to port yyy.
Thus zb looks out the port forwarding line for my Minecraft server.
Once this is set up, you can reach your server by calling your public IP.
And as your public IP regularly changes, you can then set up a DynDNS service. You can then enter a name instead of an IP and it will always be updated to display the current IP.
You would install Open VPN on a device like a Raspberry Pi.
https://www.heise.de/tipps-tricks/OpenVPN server setup-so-einfach-s-4601151.html
You will practically become your own VPN provider
This will only work through VPN. For example, AVM has a quite detailed description. Other router manufacturers probably also.
but then I have to adjust that somehow that makes it possible. I have the appropriate apps.
For example
https://avm.de/service/wissensdatenbank/dok/FRITZ-Box-7560/1060_VPN-zur-FRITZ-Box-unter-Android-installation/