NordVPN Help Center
One place for all the information you need

QNAP NAS setup

Updated

This is the tutorial to connect a QNAP NAS to NordVPN. Please select your QTS version below:

QTS v4.3.3

The tutorial was made on QNAP TS-112P, firmware: v4.3.3

1. Access your QNAP and select QVPN Service -> VPN Client -> Add -> OpenVPN.
1.PNG

2. Import one of our ovpn files which you can download from https://nordvpn.com/api/files/zip and configure the following:
2.PNG

3. Afterwards press Apply and you should see the new connection visible.
3.PNG

4. Press connect and you should be connected to our service after a few moments.
4.PNG

Close ↑

QTS v4.2.1

This is the tutorial on how to set up your Qnap NAS based on TS-112P version of the disk station using 4.2.1 (20160201) firmware version. The instructions were made for connection to the US #119 server. Note that if you connect to the other server, you need to name it in all the steps accordingly.

You will be able to connect to your Qnap control panel, configure OpenVPN, and check whether you have successfully connected.

Connect to your Qnap control panel:

  • 1. In order to connect your Qnap NAS device to VPN we will need to access its control panel. The easiest way to do that is using the Qfinder app provided together with Qnap NAS system. Please run the app and wait a few moments for the Qfinder to find the Qnap connected to your local network. A few moments after opening the app you it should list your NAS device. Double click on it in the list and its control panel will be opened in your default internet browser.

  • 2. You will now be able to log in to your Qnap control panel.

  • 3. In order to set up the VPN connection, you will need to use your administrator account.

 

Here is a tutorial on how to connect a QNAP NAS via OpenVPN:

  • 1. Using notepad or any other text editor, create a new text file on your computer. Before editing further, change the file extension from .txt to .ovpn (you may have to enable the showing of file extensions in your operating system).
    We will be connecting to US #119 server using UDP protocol and thus we call it "us119udp.ovpn". The contents of the file are as follows:
    • client
      dev tun
      proto udp
      remote 206.226.72.105 1194
      resolv-retry infinite
      remote-random
      nobind
      tun-mtu 1500
      tun-mtu-extra 32
      mssfix 1450
      persist-key
      persist-tun
      ping 15
      ping-restart 0
      ping-timer-rem
      reneg-sec 0
      auth-user-pass /share/Download/VPN/nordpass.txt
      log-append /share/Download/VPN/openvpn.log
      remote-cert-tls server
      #mute 10000
      comp-lzo
      verb 3
      pull
      fast-io
      cipher AES-256-CBC
      <ca>
      -----BEGIN CERTIFICATE-----
      MIIEyjCCA7KgAwIBAgIJAKLFtavJ/ytoMA0GCSqGSIb3DQEBBQUAMIGeMQswCQYD
      VQQGEwJQQTELMAkGA1UECBMCUEExDzANBgNVBAcTBlBhbmFtYTEQMA4GA1UEChMH
      Tm9yZFZQTjEQMA4GA1UECxMHTm9yZFZQTjEaMBgGA1UEAxMRdXMxMTkubm9yZHZw
      bi5jb20xEDAOBgNVBCkTB05vcmRWUE4xHzAdBgkqhkiG9w0BCQEWEGNlcnRAbm9y
      ZHZwbi5jb20wHhcNMTUxMjEwMTEzNDU3WhcNMjUxMjA3MTEzNDU3WjCBnjELMAkG
      A1UEBhMCUEExCzAJBgNVBAgTAlBBMQ8wDQYDVQQHEwZQYW5hbWExEDAOBgNVBAoT
      B05vcmRWUE4xEDAOBgNVBAsTB05vcmRWUE4xGjAYBgNVBAMTEXVzMTE5Lm5vcmR2
      cG4uY29tMRAwDgYDVQQpEwdOb3JkVlBOMR8wHQYJKoZIhvcNAQkBFhBjZXJ0QG5v
      cmR2cG4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ/dkWpe
      DUJDwIcOPot+gysE3LxvUz/wSKUDHQojpciprIl96rbjRRRQbfqFRx8QECcnbYIo
      T/zHdaReoZBvcola5m1nhevHZDsQLJbHVN6d6coL+opjwLOcI8K4ToHRM7swesFA
      NoI56po/I+HZH/+1S/lXdAZ/FRqFwYrr0EszX8MG0sVrcAcvK8O5f5p6zZq9EaCo
      aZaMQhsStl9sOzKXNffQlSI80lj+MBZ+CUlqFB4Fcv2ZNXSyobf/l/NwIfxXeLCV
      BicOZYAiQtTN+YbVKW0JFK0jwWl0OOBJNGIolbgGHXnIVgElYJmkqzDjqJuOzaZq
      sMt6q1QL0diLkwIDAQABo4IBBzCCAQMwHQYDVR0OBBYEFKRglihRkD9z4f15Mdu/
      jEOxfkwoMIHTBgNVHSMEgcswgciAFKRglihRkD9z4f15Mdu/jEOxfkwooYGkpIGh
      MIGeMQswCQYDVQQGEwJQQTELMAkGA1UECBMCUEExDzANBgNVBAcTBlBhbmFtYTEQ
      MA4GA1UEChMHTm9yZFZQTjEQMA4GA1UECxMHTm9yZFZQTjEaMBgGA1UEAxMRdXMx
      MTkubm9yZHZwbi5jb20xEDAOBgNVBCkTB05vcmRWUE4xHzAdBgkqhkiG9w0BCQEW
      EGNlcnRAbm9yZHZwbi5jb22CCQCixbWryf8raDAMBgNVHRMEBTADAQH/MA0GCSqG
      SIb3DQEBBQUAA4IBAQBhbPA22WsNTOlIwKzvXohprRdOVsIIy/9FYkNWOuEfvD1e
      J1TX0jhtz71w/yseApkTGgD5JAkPXmCSLddxtgQwXXoYnHanblDExMXOd5aOpm+O
      r/OaxdMek/vHpQuYIxx1PQpo5BNM+82DxjhoKpH9XnCeKRpnIScbQbBNSd9qtBuD
      HmmICppPlU+GJBZ7mV5v+0k5KX3loaa/LjVOf+OSbGUCJKe4VM9D1wIv8E6XRR8r
      rhITiuJ6i76tb4vtNT72TL0YoyotaVAmQLx7bPwfJucGAV6HN67QHjFboeod9bEQ
      iK/XmkUMJ7dL+ih3F7ZcxxdKLreT/GTJ3J7MQbnh
      -----END CERTIFICATE-----
      </ca>
      key-direction 1
      <tls-auth>
      #
      # 2048 bit OpenVPN static key
      #
      -----BEGIN OpenVPN Static key V1-----
      20c3d32aeb71bed7a42ccbcaf70d2fb8
      5665eed741f7b6c89e43dc8da55c6464
      a5a606664855bb3056dae6345ecefc80
      ded2510cabde17d867669501f8244689
      bfed7b1aebc3f995e5906ce29a088407
      67572e33917405dc5ba1b2a62c9704e4
      cf6f188f416f8559654e5d83fef2382c
      8dddb9cf78bf8dff8ae945cd04cb2ebc
      dd8c385ccf9f9ffe8b243169adbb4b02
      58ed7766efdfb8d8da23450a35ed6272
      3d55d94ba4c595265ccc2cb7c5bf74e6
      11a17d2279f709c216d02595a9fe87d3
      8babecbba21ea66d3dfaa3d5b339de9b
      05576143f038eb735826ea6698f2edaf
      755fc6b93c3f9688d126739e9e859ec2
      51c90e88ac02163d5f62c35d1c101a65
      -----END OpenVPN Static key V1-----
      </tls-auth>


    If you want to connect to a different server, please change the line
    • "remote 206.226.72.105 1194"
    to contain the IP address of the server you want to connect to. You also need to change the CA (text  between "<ca>" and "</ca>" lines) and TLS (text  between "<tls-auth>" and "</tls-auth>" lines) keys to these of the server you want to connect to.
    You can find the IP addresses as well as CA and TLS keys of the server you want to connect in the .ovpn configuration files that can be downloaded from https://nordvpn.com/ovpn/
    (note: the .ovpn file you download from the website cannot be used instead of the file we created, as they have slightly different content)
  • 2. Create a second text file with your username and password. We named the file "nordpass.txt". Enter your username in the first line and password in the second line of the file:
    • NordVPN_Username
      NordVPN_Password
  • 3. Access your QNAP user interface. Open the File Station on your QNAP, navigate to the /Download/ directory and create a new folder named "VPN" by clicking the "+" sign at the top of the window. You should now move the created .ovpn file (in our case, us119udp.ovpn) and nordpass.txt file you have created to this directory.
  • 4. You also need to create another text file called "ca.crt" that has to contain the CA certificate of the server. You can copy the same certificate as used in the .ovpn configuration file. In our case, since we are connecting to US #119 server, our ca.crt file contains this information content:
    • -----BEGIN CERTIFICATE-----
      MIIEyjCCA7KgAwIBAgIJAKLFtavJ/ytoMA0GCSqGSIb3DQEBBQUAMIGeMQswCQYD
      VQQGEwJQQTELMAkGA1UECBMCUEExDzANBgNVBAcTBlBhbmFtYTEQMA4GA1UEChMH
      Tm9yZFZQTjEQMA4GA1UECxMHTm9yZFZQTjEaMBgGA1UEAxMRdXMxMTkubm9yZHZw
      bi5jb20xEDAOBgNVBCkTB05vcmRWUE4xHzAdBgkqhkiG9w0BCQEWEGNlcnRAbm9y
      ZHZwbi5jb20wHhcNMTUxMjEwMTEzNDU3WhcNMjUxMjA3MTEzNDU3WjCBnjELMAkG
      A1UEBhMCUEExCzAJBgNVBAgTAlBBMQ8wDQYDVQQHEwZQYW5hbWExEDAOBgNVBAoT
      B05vcmRWUE4xEDAOBgNVBAsTB05vcmRWUE4xGjAYBgNVBAMTEXVzMTE5Lm5vcmR2
      cG4uY29tMRAwDgYDVQQpEwdOb3JkVlBOMR8wHQYJKoZIhvcNAQkBFhBjZXJ0QG5v
      cmR2cG4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ/dkWpe
      DUJDwIcOPot+gysE3LxvUz/wSKUDHQojpciprIl96rbjRRRQbfqFRx8QECcnbYIo
      T/zHdaReoZBvcola5m1nhevHZDsQLJbHVN6d6coL+opjwLOcI8K4ToHRM7swesFA
      NoI56po/I+HZH/+1S/lXdAZ/FRqFwYrr0EszX8MG0sVrcAcvK8O5f5p6zZq9EaCo
      aZaMQhsStl9sOzKXNffQlSI80lj+MBZ+CUlqFB4Fcv2ZNXSyobf/l/NwIfxXeLCV
      BicOZYAiQtTN+YbVKW0JFK0jwWl0OOBJNGIolbgGHXnIVgElYJmkqzDjqJuOzaZq
      sMt6q1QL0diLkwIDAQABo4IBBzCCAQMwHQYDVR0OBBYEFKRglihRkD9z4f15Mdu/
      jEOxfkwoMIHTBgNVHSMEgcswgciAFKRglihRkD9z4f15Mdu/jEOxfkwooYGkpIGh
      MIGeMQswCQYDVQQGEwJQQTELMAkGA1UECBMCUEExDzANBgNVBAcTBlBhbmFtYTEQ
      MA4GA1UEChMHTm9yZFZQTjEQMA4GA1UECxMHTm9yZFZQTjEaMBgGA1UEAxMRdXMx
      MTkubm9yZHZwbi5jb20xEDAOBgNVBCkTB05vcmRWUE4xHzAdBgkqhkiG9w0BCQEW
      EGNlcnRAbm9yZHZwbi5jb22CCQCixbWryf8raDAMBgNVHRMEBTADAQH/MA0GCSqG
      SIb3DQEBBQUAA4IBAQBhbPA22WsNTOlIwKzvXohprRdOVsIIy/9FYkNWOuEfvD1e
      J1TX0jhtz71w/yseApkTGgD5JAkPXmCSLddxtgQwXXoYnHanblDExMXOd5aOpm+O
      r/OaxdMek/vHpQuYIxx1PQpo5BNM+82DxjhoKpH9XnCeKRpnIScbQbBNSd9qtBuD
      HmmICppPlU+GJBZ7mV5v+0k5KX3loaa/LjVOf+OSbGUCJKe4VM9D1wIv8E6XRR8r
      rhITiuJ6i76tb4vtNT72TL0YoyotaVAmQLx7bPwfJucGAV6HN67QHjFboeod9bEQ
      iK/XmkUMJ7dL+ih3F7ZcxxdKLreT/GTJ3J7MQbnh
      -----END CERTIFICATE-----
  • 5. Access your QNAP user interface again and go to Control Panel -> Applications -> VPN Client.
  • 6. In the VPN Client menu from the "Add" Drop down menu select "OpenVPN".
  • 7. Fill out the OpenVPN client settings:
    7.1 Enter "US119UDP" as a Profile Name. You can name the profile however you like, however it is most helpful to name it for the server and settings used;
    7.2 Type in the IP address of the server. You need to enter the same IP address as used in the "remote" line in step #1;
    7.3 Enter your NordVPN credentials;
    7.4 Change the Encryption to "Highest (AES 256 bit)";
    7.5 Upload the ca.crt file you have created earlier;
    7.6 Enable "Allow other network devices in the same subnet to connect to the VPN through the NAS".
  • 8. You will now need to connect to your QNAP disk station using SSH tunnel. For that you can use Putty, WinSCP (Windows) or Terminal (Mac OS X, Linux). In our cases we will be using Putty client for Windows (You can download Putty here ).

    In the "Host Name (or IP address)" field enter the local IP address of your QNAP (in our case, 192.168.1.60) and click "Open".
  • 9. Enter the username and password of your QNAP administrator account.
  • 10. Use this command to open the "vpn_openvpn_client.sh" file. 
    • vi /etc/init.d/vpn_openvpn_client.sh
    Then press "A".

    Important!! Copying the text to the vi editor tends to leave out some of the first characters of the copy-pasted text. You may need to manually type in the missing part of the copied text.

    Now you need to change the beginning of this file from
    • #!/bin/sh

      VPN_CONF="/etc/config/vpn.conf"
      VPN_NUM="$2"
      VPN_CONF_S=1
      VPN_CONF_E=10
    to
    • #!/bin/sh

      OPENVPN=/usr/sbin/openvpnclient
      PIDFILE="/var/run/openvpn.client.pid"
      OPENVPN_CONF="/share/Download/VPN/us119udp.ovpn"
      OPENVPN_CONF_PATH="/etc/openvpn"
      VPN_CONF="/etc/config/vpn.conf"
      VPN_NUM="$2"
      VPN_CLIENT="OPENVPN_CLIENT""${VPN_NUM}"
      MAX_VPN_INDEX="255"
    Once you complete editing the file press "Esc" and enter this command ":wq". It will save all the changes you have made to the file.

    Also, restarting your QNAP disk station will reset all changes made to this file. Therefore, you will need to repeat this step after each QNAP restart to connect to VPN.
  • 11. You can now connect to the VPN using this command:
      • openvpn --config /share/Download/VPN/us119udp.ovpn
  • 12. Executing the command will not generate any message in the Putty window. Therefore, you need to open the openvpn.log file in the /Download/VPN directory to confirm that you got connected to the VPN. The last line of the log file should be "Initialization Sequence Completed"

Checking whether your IP was successfully changed:

Close ↑

Check whether the VPN connection is working
  • 1. Please go to this website and copy the location of the magnet link. Do not close this page just yet.

  • 2. Now open Download Station on your QNAP user interface and add a URL to your downloads list.

  • 3. In the new window, paste the Magnet link you have copied a few at the beginning of step #13 and click Next. In the next Window hit Apply without making any changes.
  • 4. Now you can go back to the website you have copied your magnet link from and see what IP address your QNAP is using. Of course, it should show the IP address of the server you are connected to.

Close ↑