Setting up a Synology OpenVPN Server for Remote Access – 3 Step Guide

Looking to set up a Synology OpenVPN server for remote access? Synology has long been a favourite for small to medium businesses, offering a versatile platform that often serves as the heart of a company's data infrastructure. Both the DiskStation and the Synology Router range offer support for a secure OpenVPN server,  providing a straightforward way for staff to connect remotely.

This guide walks you through setting up a secure Synology OpenVPN server on modern Synology NAS systems (DSM 7+) and Synology Routers (RT-series), optimized for use with VPN Tracker on Mac, iPhone, and iPad.

Synology NAS DiskStation

Menu

• Overview: Compatible Synology Devices
• Synology OpenVPN Server Configuration
• Connect to Synology OpenVPN Server on Mac & iOS

Overview: Compatible Synology Devices

VPN Tracker is compatible with the full range of Synology hardware supporting OpenVPN. Below is a breakdown of the most relevant devices for business remote access at the time of publishing:

Note: For the best performance on modern Apple Silicon (M-series) Macs, we recommend using hardware that supports AES-GCM encryption within the OpenVPN settings.

Synology OpenVPN Server Configuration

Step One: Install the VPN package

• For NAS Users: Open the Package Center and install the "VPN Server" package:
  Tip: For Router Users (RT6600ax, WRX560), you'll need to install the "VPN Plus Server."

Installing the VPN Server package on a Synology NAS

Step Two: Enable and Secure your OpenVPN Server

• Open the VPN Server app and select the OpenVPN tab.
• Check the box Enable OpenVPN server.
• We recommend using AES-256-GCM encryption and SHA512 authentication for maximum performance on Apple Silicon Macs.
• Check Allow clients to access server's LAN to reach your entire local network.
• Click Apply and then select Export configuration.

Synology OpenVPN Server setup

A note on Port Forwarding: Upon saving, you'll be shown this warning. Make sure you forward UDP port 1194 on your external router to your Synology's internal IP address.

Step Three: Set User Privileges (Crucial for DSM 7)

• In the VPN Server app, go to the Privilege tab.
• Ensure your specific user account is granted OpenVPN access; otherwise, the connection will be blocked.

Optional: Dynamic DNS

Finally, if your connection lacks a fixed IP, configure a Dynamic DNS service (e.g., name.synology.me) to provide a fixed hostname.

Connect to Synology OpenVPN Server on Mac, iPhone, iPad

VPN Tracker provides full support for Synology OpenVPN connections, giving you secure remote access to your Synology device on Mac and iOS.

• • Open the Synology Connection Creator for VPN Tracker or, in the app, go to File > New Vendor Connection > Synology NAS (OpenVPN)
    
    
  • Drag in your Synology .ovpn file:

Drag and drop your Synology OpenVPN configuration file

• Under Basic Setup > Address, enter your router's public (WAN) IP address or DynDNS host name:
  
• Then, hit Save. VPN Tracker will automatically parse your unique configuration settings and save your connection to your Synology OpenVPN server in your account.