Secure Network for Smart Home
Wi-Fi router: A better route to cybersecurity
“If you're looking to build a robust, non-compromising, secure home network, this is the router to get.” Learn more
Keep your whole family safe
No matter how cautious we are, it's sometimes not possible to stop every family member from clicking on that phishing link or sharing Wi-Fi password with others. Now, Synology Router will always be there for them.
- Threat intelligence: Built-in security filters alert users when they're heading to a malicious website. The databases are automatically updated to keep up with the latest threats.
- Web privacy: No browsing history is sent to the cloud for analysis.1 The additional support for DNS over HTTPS ensures no attackers or even your ISPs can eavesdrop on which sites you visit.
- Secure Wi-Fi: You can prevent unknown devices from connecting to your family Wi-Fi – guest Wi-Fi will still be available for guests. The next-gen Wi-Fi standard, WPA3, also equips you with better defenses against brute-force attacks.

“I don't feel safe on the Internet anymore without this router.”
Amazon customer
Manage the Internet of Things
The IoT devices are often the weakest link in a smart home. They work 24/7 in the background (without us paying much attention to), and we have fewer ways to protect them – the best of which is to do it at the network level.
- Threat Prevention: This package makes the business-grade intrusion prevention technology available to every household, silently dropping any suspicious packet with no human intervention required.2 Learn more
- Traffic monitoring: A common symptom of a compromised device is an unusually high amount of traffic (such as from your smart speaker). Keep yourself informed via the regular reports or real-time dashboard, and block any dubious device with just one click.
- Location-based firewall: Concerned about connections from or to places where most cyberattacks originate? You can block the whole country/region just to be safe.


“This may be my favorite router now when it comes to parental controls. Synology, in my opinion, is years ahead now of anybody that I'd consider to be their competitors in this space.”
Willie Howe TechnologyProtect kids until they're ready
Some things do not pose a security risk but are dangerous to the little ones nonetheless: adult or violent content, or simply too much time online. The profile-based parental controls help you set up different Internet policies for children of different ages. Watch the video
Get started
- Synology Router RT2600ac: In addition to being one of the top-rated routers for performance and security, it also works with Synology MR2200ac to bring mesh Wi-Fi to everywhere in the house. Learn more
- Synology Router Manager: The award-winning operating system that powers every Synology Router. Find out what else it has to offer

- Some other products carry out all or part of the security analysis in the cloud. In comparison, Synology Router regularly downloads domain/IP blacklists and performs the filtering locally. An optional feature, Google Safe Browsing, runs the first round of security checks locally on the router. If a website fails the checks, this specific URL is then sent to Google for verification. This feature needs to be enabled by users separately.
- Available on Synology RT2600ac. An external storage device (USB drive or SD card) is required.
Network Center
Wide Area Network (WAN) support
- Internet connection types include static IP, PPPoE, DHCP client and DS-Lite
- VPN connection types include PPTP, OpenVPN, and L2TP over IPSec
- Supports network load-balance and fail-over
- Access the Internet via 3G/4G dongle (compatibility list)
- Access the Internet via USB Tethering (compatibility list)
Local Area Network (LAN) support
- Supports DHCP reservation with DHCP server
- Supports static network routing and policy network routing
- Supports IPv4 forwarding with UPnP protocol and static rules
- Supports DMZ hosting, port forwarding, and port triggering rules
Traffic Control
- Fully control the Internet access by device
- Application layer QoS by device
- Supports traffic monitor for network traffic live view
- Supports traffic reports to keep track of network access trends
IPv6 Support
- Connection types include native IPv6, 6in4, 6to4, 6rd, DS-Lite, DHCPv6-PD, IPv6 Relay (pass-through) and FLET’s IPV6 Service
- IPv6 auto configuration includes SLAAC, DHCPv6 and SLAAC + DHCPv6
IPTV / VoIP
- Supports VLAN tag customization
- Supports IGMP snooping and IGMP proxy
Other Network Services
- DNS Server
- DNS Relay
- DDNS
- QuickConnect
- NTP
- SNMP
- SSH
- FTP
- SAMBA
Operation Modes
- Wireless Router mode
- Wireless Access Point mode (AP mode)
- Wireless Client mode (only supported on RT1900ac)
- Wireless Distribution System (WDS, only supported on RT2600ac)
Wireless Control
Overview
- Network status monitor includes real-time statuses and transmission rates of your Wi-Fi, Guest Network, Wi-Fi points, and connected devices
Wireless
- Supports flexible tri-band configurations (only available on MR2200ac)
- Supports band steering and roaming
- Supports security standards including Wi-Fi Enhanced Open (OWE), WEP, WPA/WPA2-Personal, WPA/WPA2-Enterprise, WPA2-Personal, WPA2-Enterprise, WPA2/WPA3-Personal, WPA3-Personal and WPA3-Enterprise (only available on RT2600ac & MR2200ac)
- Supports DFS channels by country
- Supports 802.11k, 802.11v, 802.11r (only available on RT2600ac & MR2200ac)
- Supports Wi-Fi Protected Setup (WPS)
Wi-Fi Point (only available on RT2600ac & MR2200ac)
- Supports additional and removable Wi-Fi points in the network
- Centralized Wi-Fi system management
- Supports network topology to monitor the Wi-Fi system as a whole
- Supports transmission tests between the primary Wi-Fi point and other Wi-Fi points
- Provides real-time Wi-Fi transmission rates of all Wi-Fi points
- Provides transmission rates from connected devices to each Wi-Fi point
Guest Network support
- Supports Wi-Fi portal page customization
- Supports network access scheduling
- Supports password rotation
- Supports smart connect
MAC Filter
- Allow or block devices with the corresponding MAC addresses
Security Advisor
- Supports malware detection and removal
- Supports security scans for account and password, network, and system
- Supports version checks for SRM and installed packages
Firewall
- Supports access allowance and denial of selected ports or services on specific IP addresses
- Supports geographical firewall rules
- Internet access can be disabled for connected devices
- Supports traffic control of services and TCP/UDP ports
- Supports DDoS protection
- Supports VPN pass-through
Auto Block
- Supports access block after a specified number of attempts
- Supports customization of expiration time
- Supports black and white list
Safe Access
- Supports User Profile to manage specific connected devices
- Supports Network Profile to manage the connected devices in your local and guest network
- Supports Internet access time management with Internet Schedule, Time Quota, Pause, and Rewards
- Supports Access Request for users to ask permission to browse specific websites
- Supports Web Filter to protect users from inappropriate websites
- Supports Safe Search on Google, Bing, and YouTube
- Integrates up-to-date Google Safe Browsing and the Threat Intelligence Database to ensure Internet security
- Supports Internet usage reports
Note
- Learn more about how to enable Google Safe Browsing here.
Threat Prevention
- Supports network invasions detection
- Supports self-defined class and signature policy
- Supports details of malicious events
- Supports scheduled signature updates
- Supports notifications via Email, SMS, and push notification services
- Supports auto-drop of high-risk packets
- Supports geographical distribution of malicious sources
- Supports limitation of storage usage of log files
- Support the configuration of backup and restoration
VPN Plus Server
- Supports VPN services including WebVPN, SSL VPN, SSTP, OpenVPN, L2TP over IPSec, and PPTP
- Supports portal page customization for WebVPN
- Supports split tunnel for SSL VPN
- Client application support for SSL VPN
- Synology SSL VPN Client (for Windows/macOS/Linux)
- VPN Plus mobile app (for iOS/Android)
- Supports Dead Peer Detection (DPD), Perfect Forward Secrecy (PFS), and DNSSEC Validation for Site-to-Site VPN
- Supports Remote Desktop
- Remote Desktop Protocol (RDP) is supported in Windows 10 Enterprise (Professional), Windows 8.1 Enterprise (Professional), Windows 7 Enterprise (Professional)
- Virtual Network Computing (VNC) is supported in macOS 10.11, 10.12, and 10.13, along with the application support in TightVNC and XVNC.
- Supports real-time monitoring and connection management
- Supports traffic reports for activated VPN services
- Supports permission settings to allow VPN connections for selected users and groups
- Licenses
- Client VPN Access License: One free license has been installed on each VPN Plus
- Site-to-Site VPN License: Each VPN Plus supported Synology product is eligible for a one-time 30-day free trial
- Check the maximum connections for different models
File Station
- Drag and drop files between browser windows
- WebDAV/WebDAV over HTTPS/FTP/SFTP client
- Share files with other users on the same Synology SRM
- Search files according to various criteria
- Index various types of files for a more effective and efficient search result
- Thumbnail and list views
- Compress/extract archived files
- Remote Folder supports mounting folders on other SMB file servers
- Photo Viewer and Video Player to view photos and videos
- Set speed limits for specific users or groups
- Transfer Logs
- Create sharing links to allow people without SRM user credentials to access folders and files
- Create file request to easily collect files from others
- Supports Recycle Bin
Media Server
- Works as a DLNA-compliant Digital Media Server (DMS) and streams media to DLNA-certified products.
- Supported audio formats: AAC, AIFF, APE, DSD, FLAC, M4A, Apple Lossless, MP3, Ogg Vorbis, PCM, WAV, WMA, WMA VBR, WMA PRO, WMA Lossless (The actual playback capabilities may vary depending on the DLNA/UPnP client)
- Supported video formats: 3GP, 3G2, ASF, AVI, DAT, DivX, DVR-MS, FLV, ISO, M2T, M2TS, M4V, MKV, MP4, MPEG1, MPEG2, MPEG4, MTS, MOV, QT, SWF, TP, TRP, TS, VOB, WMV,XviD, RMVB (The actual playback capabilities may vary depending on the DLNA/UPnP client)
- Supported image formats : BMP, JPG (jpe, jpeg), GIF, ICO, PNG, PSD, TIF (tiff), UFO
- MKV video transcoding (H.264 video remux) support for SONY TV and PS3
- Transcoding APE/FLAC/OGG/AIFF/AAC/ALAC audio
- Customizable DLNA menu
System Requirements
- Supports DLNA-certified Digital Media Player products
DNS Server
- Master and slave zones
- Forward and reverse domain resolution
- NS, A, AAAA, CNAME, MX, SPF, SRV, TXT, PTR records
- TSIG (Transfer Signature) keys
- Split-horizon DNS
Notes:
- Please note that the figures marked in asterisks are derived from the Synology lab by using high-performance client computers with optimized network settings, and could vary in different environments.