QNAP Systems Ts 253 User Guide

							281 
 
Privilege Settings 
Select the VPN users and specify their privileges. 
 
Add VPN users 
Click Add VPN Users and check the services you want to allow each user to connect with. Both local 
users and domain users can be VPN users. You can also search for users in the search bar. 
 
Note: To connect to a VPN server using domain user accounts, you must enable the 
service in Domain Security.  
						

							282 
 
 
 
Delete VPN users 
Click Delete to remove VPN users. The users will be unable to connect to the VPN service after being 
deleted. 
 
Connection List 
This list shows information about each connection with a server including login time, uptime, 
username, source IP, VPN client IP, and connection method. 
Click “Disconnect” on the table to disable client connections. 
 
VPN Client 
The NAS provides the VPN client service which can connect to a VPN server via PPTP, OpenVPN and 
L2TP/IPSec. The NAS also supports saving multiple VPN settings to easily switch between different 
connections. 
 
Before you start 
Before starting the VPN client service, please ensure that the Internet connection is normal. 
 
Connect a VPN server via PPTP 
The Point-to-Point Tunneling Protocol (PPTP) is a commonly-used method for implementing VPN and is 
supported by most clients, including Windows, Mac OS X, Linux, and mobile devices. 
1.  Go to QVPN Service > VPN Client. 
2.  Click Add > PPTP to connect a VPN server. 
3.  Enter the connection configuration settings, including the profile name, server address (that you 
want to connect to), and the username and password of the VPN server. 
4.  Choose any of the following authentication mechanisms from the ”Authentication" menu to protect 
the VPN client’s password during authentication: 
o MS-CHAPv2: The password will be encrypted using Microsoft CHAP version 2. 
o MS-CHAP: The password will be encrypted using Microsoft CHAP version 1.  
						

							283 
 
o PAP: The password will not be encrypted. 
o CHAP: The password will be encrypted using CHAP. 
5.  If you choose MS-CHAP or MS-CHAPv2, go to the Encryption menu and select an option: 
o None: The VPN connection will not be encrypted. 
o Medium (AES 40/128 bit): The VPN connection will be encrypted using a 40-bit or 128-bit key. 
o High (AES 256 bit): The VPN connection will be encrypted using a 256-bit key (the highest-possible 
level.) 
6.  Specify the subnet mask. 
7.  Select any of the following options, as required: 
o Use the default gateway on remote network: This will allow all packets to be transferred via the VPN 
server. 
o Allow other network devices to connect to the VPN through the NAS: This will allow network devices 
on the same LAN as the NAS to connect to the same VPN. 
o Reconnect when the VPN connection is lost: This will automatically reconnect to the VPN server 
when the connection is lost. 
8.  Select Create to start. 
Note: To connect to a VPN server using domain user accounts, you must enable the 
service in Domain Security.  
						

							284 
 
 
If you select Allow other network devices to connect to the VPN through the NAS, the network 
device can access the VPN via the NAS. To enable this function, you must change the default gateway 
on that other device. Using a Windows PC as an example: 
1.  Go to Control Panel > Network and Sharing Center > Change adapter settings.  
2.  Right-click the connection icon and choose Properties.  
3.  Select Internet Protocol Version 4 (TCP/IP) and click Properties.  
4.  Choose Use the following IP address and change the Default gateway to the IP address of the 
NAS that is operating the VPN Client service then click OK. 
 
Connect a VPN server via OpenVPN 
The NAS also supports OpenVPN, which is an open-source solution for VPN services. It protects a 
VPNs connection with the SSL/TLS encrypting mechanism. It is also available on Windows, Mac OS X, 
Linux, Android and iOS. 
 
To connect to a VPN server via OpenVPN, follow these steps: 
1.  Go to QVPN Service > VPN Client. 
2.  Click Add > OpenVPN to connect to a VPN server. 
3.  Select the OVPN file (.ovpn) and click “Open”. 
4.  Enter the connection configuration settings, including the profile name, and the username and 
password of the VPN server.  
5.  Click inside the required text field to import the certificate (ca.crt) exported from the OpenVPN 
server.  
6.  Specify the subnet mask. 
7.  Select any of the following options, as required: 
o Use the default gateway on remote network: This will allow all packets to be transferred via the 
VPN server. 
o Allow other network devices to connect to the VPN through the NAS: This will allow network devices 
on the same LAN as the NAS to connect to the same VPN. 
o Reconnect when the VPN connection is lost: This will automatically reconnect to the VPN server 
when the connection is lost. 
8.  Click Apply to start. 
o If you check Use the default gateway on remote network, the default gateway on your NAS will 
change to the VPN server’s default gateway. 
o If you check Allow other network devices to connect to the VPN through the NAS, the network 
device can access the VPN via the NAS. 
 
 
 
  
						

							285 
 
Connect a VPN server via L2TP/IPSec 
 
1.  Go to QVPN Service > VPN Client. 
2.  Click Add > L2TP/IPSec to connect a VPN server. 
3.  Enter the connection configuration settings, including the profile name, server address (that you 
want to connect to), and the username and password of the VPN server. 
4.  Choose any of the following authentication mechanisms from the Authentication menu to protect 
VPN client’s password during authentication: 
o MS-CHAPv2: The password will be encrypted using Microsoft CHAP version 2. 
o MS-CHAP: The password will be encrypted using Microsoft CHAP version 1. 
o PAP: The password will not be encrypted. 
o CHAP: The password will be encrypted using CHAP. 
5.  If you choose MS-CHAP or MS-CHAPv2, go to the Encryption menu and select an option: 
o None: The VPN connection will not be encrypted. 
o Medium (AES 40/128 bit): The VPN connection will be encrypted using a 40-bit or 128-bit key. 
o High (AES 256 bit): The VPN connection will be encrypted using a 256-bit key (the highest-possible 
level.) 
6.  Type the preshared key. 
7. Specify the subnet mask. 
8. Select any of the following options, as required: 
o Use the default gateway on remote network: This will allow all packets to be transferred via the 
VPN server. 
o Allow other network devices to connect to the VPN through the NAS: This will allow network devices 
on the same LAN as the NAS to connect to the same VPN. 
o Reconnect when the VPN connection is lost: This will automatically reconnect to the VPN server 
when the connection is lost. 
9.  Select Create to start. 
 
Logs 
 
Connection Logs 
QVPN Service creates a log entry every time a user accesses a VPN server. The connection logs 
include the connection method, date, time, username, source IP, and content. 
 
Note: QVPN Service only displays the connection logs. To copy or delete a log, or to 
export the list, go to “Control Panel” > “System” > “System Logs”. 
 
  
						

							286 
 
 
Enable Connection Logs on QVPN Service 
 
1. Open QVPN Service. 
2. Go to “Logs” > “Connection Logs”. 
3. Move the slider to the right. 
 
Event Logs 
QVPN Service creates a log entry every time a user enables or disables services, changes settings, 
and modifies the configuration. The event logs include the date, time, username, and content. 
 
Note: QVPN Service only displays the event logs. To copy or delete a log, or to export the 
list, go to “Control Panel” > “System” > “System Logs”.  
						

							287 
 
 
 
 
Qsync Central 
 
Qsync Central is a cloud-based file synchronization service on the NAS. Simply add files to 
your local Qsync folder, and they will be available on your NAS and all its connected devices. 
 
 
In this chapter, the following topics are covered: 
Before you Start 
Starting Qsync Client  
Synchronization 
Sharing 
Remote Access 
Synchronization Management 
Version Control 
Managing or Monitoring Qsync Status via Web Browser 
Using Centralized Mode for Centralized Management 
 
Before you Start    
 
Follow the 5 steps below before Qsync deployment. 
1. Create user accounts on the NAS, 
2. Downloading Qsync Central on your NAS. 
3. Enable home folders for all users. 
4. Download the Qsync Client utility on your computers and Qfile on your mobile devices. 
5. Log into the NAS (serving as a Qsync server) from your computers or mobile devices 
(referred to in this document as Qsync clients.) 
 
  
						

							288 
 
1. Creating user accounts on the NAS 
o Go to Control Panel > Privilege Settings > Users > click Create (or go to 
Qsync Central > Users > Create a User.)  
o Only NAS administrators can create accounts. 
 
2. Downloading Qsync Central  
1. Go to “Main Menu” > “App Center” to launch App Center. 
2. In the search field, type “Qsync”. 
3. Select “+ Install” under the Qsync Central icon in the search results.  
 
3. Enable Home Folders for All Users  
1. Go to “Control Panel” > “Privilege” > “Users” > “Home Folder”. 
2.  Select “Enable home folder for all users”, select disk volume to create folders in. Click 
“Apply”. 
 
4. Downloading Qsync Client  
Follow the instructions on the Overview page to download the utility for your client device 
(log into the NAS, click Qsync Central on the NAS Desktop > Overview page,) or 
directly download the utility from the QNAP website: Support > Download > 
Utilities. 
o For computers, download the Qsync Client utility (only available for Windows.) 
o For mobile devices, download and install Qfile from the iOS or Android app stores. 
 
5. Setting up Qsync Client  
Launch the installer and follow these steps to set up the Qsync Client:  
1. To locate the NAS within a LAN, simply click Search or key in its IP address or name 
(e.g. IP address: 10.8.1.20 or 192.168.1.100.) To connect to a remote NAS (over the 
Internet) use your myQNAPcloud address (e.g. [email protected].) 
2. Enter the NAS login username and password. 
3. Set up the Qsync local folder on your PC.  
4. Assign a name to identify the local PC for the Qsync server.  
5. Click Apply . 
6. Pair a local folder with the shared folder on the NAS.  
 
Note: If the NAS connection ports have been changed, please append the port number to 
the IP address; otherwise only enter an IP address. (Default port number: 8080) 
 
 
 
  
						

							289 
 
Starting Qsync Client  
 
Double click the Qsync shortcut in Windows to open the Qsync local folder. Click the Qsync 
Client icon on the taskbar to bring up the menu. If you copy/move files to the local Qsync 
folder on one of your devices, the files will be synced with all the other devices (devices with 
the Qsync Client installed that are connected to the NAS.) From now on, there is no need to 
copy files back-and-forth between your PC and these other devices or worry about the size 
of files as you try to attach them to an email. 
 
Synchronization 
 
There are several methods for synchronizing files. Qsync Central will automatically 
synchronize the files across your computers and mobile devices that have the Qsync Client 
installed, and they will also be synchronized to the Qsync folder on the NAS: 
1. For PCs, drag and drop files to the local Qsync folder. 
2. For mobile devices (Qfile), copy or move files into the local Qsync folder.  
3. For the NAS, copy or move files to the Qsync folder using File Station.  
 
Note:  
If files are dragged and dropped to the local Qsync folder, they will be moved (and 
not copied) to that folder if the files and the local Qsync folder are on the same disk 
drive. This behavior is the same as Windows File Explorer.  
The maximum size of a single file that Qsync can transmit across a LAN is 50GB. 
Qsync does not support SAMBA, FTP or AFP for files access. Please access files using 
File Station or a Qsync Client. 
Qfile only synchronizes the file list and does not download the files to a mobile device. 
Please download the files when you need them.  
 
Offline editing 
You can edit your files offline and Qsync Central will automatically synchronize the changes 
made once your device is online. 
 
Sharing 
 
Sharing files by download links 
You can share files by sending download links to those who have not installed Qsync Client. 
 
For Windows:  
1. Right click on the file that you want to share in the local Qsync folder and click Share 
the link.   
						

							290 
 
2. Choose to send the link via email or copy the link to directly share it. 
3. Click Settings to see more options, including creating a SSL link, the expiration date, or 
password. 
 
For the NAS, right click on the file that you want to share in the Qsync folder within File 
Station and click Share.  
 
For mobile devices, launch Qfile to share the file in the local Qsync folder by clicking the icon 
to the right and click Share.  
 
The file recipients can click the link or copy and paste it to a web browser to download the 
file. 
 
Sharing folders with a group 
You can share a folder with a user group. If any member from the group shares the files in 
the folder, other members can receive the file. 
1. Create user accounts in the NAS for each group member. 
2. Ensure that a Qsync Client is installed on each member’s device. 
3. Right click on the folder you want to share in the local Qsync folder and click Share this 
folder as a team folder. 
4. Select users from the list of local or domain users. 
 
All of the members in the group will receive a file sharing invitation. Once accepted, the 
group members can start accessing this shared folder. 
 
Note:  
The team folder will only take effect after users accept their invitation. 
Users cannot share team folders that have been shared with them. 
Only the folders under /home on your NAS can be shared as a Team Folder. 
 
Remote Access 
 
Accessing the NAS over the Internet 
To connect to a remote NAS (over the Internet), the administrator must first configure the 
device name for the NAS in myQNAPcloud. The administrator can then share the 
myQNAPcloud address to allow users to access the remote NAS. (e.g. 
[email protected]) 
 
Note: