If you want to make your Synology NAS accessible over the Internet. An easy way to do this is by using something called QuickConnect. So in this video we show you how easy it is to configure your NAS so that you can access it from both your local network and the internet.
Note: Just a quick heads up about the security of your NAS. If you decide that you need to make your NAS accessible from the internet. That in itself will make it vulnerable to attack. So to avoid your NAS becoming compromised, as a minimum please make sure that you regularly do the following:
- Ensure that your router’s system software is up to date.
- Have all Internet of Things devices on their own isolated network.
- Make sure that all devices connected to your home network are virus and malware free.
- Regularly check for, and update Disk Station Manager.
- Ensure that any applications installed on your NAS are up to date with the latest security and bug fixes.
- Log into Disk Station Manager (DSM) using your administrators credentials.
- From the desktop of the DSM, select Control Panel.
- Within Control Panel , locate and choose External Access.
- Now tick the checkbox next to enable QuickConnect.
- You will be prompted to enter the credentials for a Synology account.
Note: If you used a Synology account to setup Hyper Backup. Your NAS will automatically try and use that account to configure QuickConnect. If you do not have a Synology account you will be presented with a screen to create one.
- After your NAS connects to Synology’s servers, you will need to create a QuickConnect ID.
- Enter the name you want to use and click Apply.
- You will now see details on how to remotely connect to your NAS.
- Test that QuickConnect works.
Note: A QuickConnect ID will act like a domain name for your NAS. So if you type into a web browser your Quickconnect ID followed by “.QuickConnect.to” you will be taken to the DSM sign in page for your NAS.
Note: As some consider QuickConnect not to be secure. You can disable the part that relays your data through a synology server. This will revert the Synology servers and your QuickConnect account into acting as just a DNS server.
- Still in External Access – QuickConnect, click on Advanced Settings.
- Under the heading Options is a tick box that will allow you to disable QuickConnect relay service and control which applications will be accessible via QuickConnect.
- Remove the tick from QuickConnect relay and click Apply.
Note: Disabling QuickConnect relay service will prevent you from remotely accessing your NAS from the internet. This is because your router is once again taking responsibility for your network security, and it’s blocking Internet traffic from reaching your NAS. So in order to fix this you will need to create port forwards on your router.
- Open your routers system settings.
- Locate its advanced network settings.
- Choose Port forward/port management.
- Create your port forwarding rule.
Note: As your router will probably be different from ours. We can’t provide you with step by step instructions on creating port forwards. However, if you have been following our series, then your NAS is currently configured with File Station, Audio Station, Synology Photos and Disk Station Manager.
If this is the case, then you will only need to create two new rules which will point specific types of internet traffic at your NAS . One for port 1900 using UDP and one for port 5001 using TCP.
For anyone who has already configured other services on their NAS. You may need to create additional port forwards. So you can find which ports need to be opened by using Synology’s article – What network ports are used by DSM services?
- Once you have configured your port forwards, and you can remotely connect back to your NAS. You can enable or disable specific applications from being remotely accessible.
- Returning to External Access – QuickConnect – Advanced Settings. You will find listed under the heading Permissions a list of all the applications and service active on your NAS.
- Untick any of the services or applications you don’t want to be accessible over the internet.
Note: Disabling DSM, will mean that you will not be able to remotely access your NAS using a web browser. If you must leave DSM accessible via the internet we recommend that you enable two factor authentication.
- Click Apply, and test that you can still access the services and applications you want to use.
- mydoodads article – Synology NAS beginners guide | Part 1 | prepare your network.
- mydoodads article – Synology NAS beginners guide | Part 21 | Firewall.
- Synology article – Synology QuickConnect White Paper.
- Synology article – Quick connect.
- Synology article – What network ports are used by DSM services?
Add comment