Connection

SRM allows you to configure Internet connection types of your Synology Router, such as PPPoE, DHCP, or DS-Lite. Besides, you can also establish VPN and IPv6 connections of your router. These settings are available at Network Center > Internet > Connection.

Contents

• Internet connection
• VPN client settings
• IPv6 settings
• Other Internet settings
  • Secondary interface
  • Manually configured DNS
  • Energy saving
• I can't connect to the Internet. What can I do?

Internet connection

Select and configure the type of connection you wish to set up in Network Center > Internet > Connection.

To configure PPPoE settings:

1. Select PPPoE from the Connection type drop-down menu.
2. Configure the following:
   • Username: Enter your username.
   • Password: Enter your password.
   • Set as default gateway: Select Enabled or Disabled.
   • Acquire Internet IP: Select Auto or Manual.
3. If you wish to manage advanced settings, click Advanced Options and configure the following:
   • Enable IPv6: Select Enabled or Disabled.
   • DNS: Select Auto.
   • MTU value: Enter your maximum transmission unit parameters.
   • MRU value: Enter your maximum receive unit parameters.
   • Service name: Enter the service name.
   • Access concentrator: Enter your Access concentrator name.
   • LCP echo request interval: Determine the request interval in seconds.
   • Allowed LCP echo request failure times: Determine the allowed failure times.
   • Additional PPPD options: Enter additional Point-to-Point Protocol daemon settings.
4. Click Apply to save your settings.

To configure Auto settings:

1. Select Auto from the Connection type drop-down menu.
2. Select Enabled or Disabled from the Set as default gateway drop-down menu.
3. Click Apply to save your settings.

To configure Manual settings:

1. Select Manual from the Connection type drop-down menu.
2. Configure the following:
   • IP address: Enter an IP address.
   • Subnet mask: Enter a subnet mask value.
   • Gateway: Enter a gateway value.
   • DNS server: Keep the preset value.
   • Set as default gateway: Select Enabled or Disabled.
3. Click Apply to save your settings.

To configure DS-Lite settings:

1. Select DS-Lite from the Connection type drop-down menu.
2. Configure the following:
   • Configuration type: Select Auto or Manual.
   • AFTR address: Enter your AFTR address.
   • B4 IPv4 address: Select your IPv4 address.
   • Set as default gateway: Select Enabled or Disabled.
3. Click Apply to save your settings.

VPN client settings

A VPN, or virtual private network, is a solution to securely access resources on your private network from the Internet. With encryption and other security mechanisms, VPN technology allows business members to easily access the central network of the company and to leverage the resources in it just as in LAN. Individuals can also access resources on their home LANs when being far away from home.

To connect to VPN:

1. Go to Network Center > Internet > Connection and click the VPN Settings button.
2. Click Create, and a window will open, prompting you to choose from the following connection types:
   • PPTP: PPTP (Point-to-Point Tunneling Protocol) is a commonly used VPN solution supported by most clients (including Windows, Mac, Linux, and mobile devices).
   • OpenVPN: OpenVPN is an open-source solution for implementing VPN service. It protects the VPN connection with the SSL/TLS encryption mechanism.
   • L2TP/IPSec: L2TP (Layer 2 Tunneling Protocol) over IPSec provides virtual private networks with increased security and is supported by most clients (such as Windows, Mac, Linux, and mobile devices).

To create a PPTP profile:

1. When prompted to choose a VPN connection method, choose PPTP, and then click Next.
2. Pick a name for the new profile, specify the address of the VPN server you want to establish a connection with, and enter your username and password for the server. Click Next to continue.¹
3. Choose one of the following authentication protocols from the Authentication menu to protect VPN client's password during authentication:²
   • PAP: The password will not be encrypted during authentication.
   • CHAP: The password will be encrypted using CHAP (Challenge-Handshake Authentication Protocol).
   • MS CHAP: The password will be encrypted using Microsoft CHAP version 1.
   • MS CHAP v2: The password will be encrypted using Microsoft CHAP version 2.
4. If you chose MS CHAP or MS CHAP v2, then select one of the following from the Encryption menu to encrypt the VPN connection:²
   • No MPPE: The VPN connection will not be protected with Microsoft Point to Point Encryption.
   • Require MPPE (40/128 bit): The VPN connection will be protected with 40-bit or 128-bit Microsoft Point to Point Encryption.
   • Maximum MPPE (128 bit): The VPN connection will be protected with 128-bit Microsoft Point to Point Encryption, which provides the highest level of security.
5. Tick any of the following checkboxes depending on your needs:
   • Use default gateway on remote network: Enable this option to route the network traffic of the Synology Router to the specified VPN server.
   • Allow other network devices to connect through this Synology server's Internet connection (available for the operation mode Wireless AP only): Enable this option to allow network devices that are within the local network where your Synology Router is located to connect to the same VPN server.
   • Reconnect when the VPN connection is lost: If the VPN connection is unexpectedly lost, the system will attempt to re-establish the connection five times, attempting once every 30 seconds.
6. Click Apply.

To create an OpenVPN profile:

1. When prompted to choose a VPN connection method, choose OpenVPN, and then click Next.
2. Pick a name for the new profile, specify the address of the VPN server you want to establish a connection with, and enter your username and password for the server.
3. In the Certificate field, click the Browse button to find and import the certificate file (e.g., ca.crt) that was exported from the VPN server. Click Next to continue.¹
4. Tick any of the following checkboxes depending on your needs:
   • Enable compression on VPN link: Enable this option to perform data compression before transferring data via a VPN. This option might increase transfer speed but will consume more system resources.
   • Use default gateway on remote network: Enable this option to route the network traffic of the Synology Router to the specified VPN server.
   • Allow other network devices to connect through this Synology server's Internet connection (available for the operation mode Wireless AP only): Enable this option to allow network devices that are within the local network where your Synology Router is located to connect to the same VPN server.
   • Reconnect when the VPN connection is lost: If the VPN connection is unexpectedly lost, the system will attempt to re-establish the connection five times, attempting once every 30 seconds.
5. Click Apply.

To create an OpenVPN (via .ovpn) profile:

1. When prompted to choose a VPN connection method, choose OpenVPN (via importing an .ovpn file), and then click Next.
2. Pick a name for the new profile, and in the Import .ovpn file field, click Browse to select and import an .ovpn file exported from the VPN server.
3. Enter the following information provided by your VPN server administrator: your username, password and import the CA certificate file (e.g., ca.crt).
4. If the VPN service provider has also provided you with a TLS-auth key, client key, client certificate, or a certificate revocation list, please click Advanced options and import them into their respective fields.
5. Click Next to continue.¹
6. Tick any of the following checkboxes depending on your needs:
   • Use default gateway on remote network: Enable this option to route the network traffic of the Synology Router to the specified VPN server.
   • Allow other network devices to connect through this Synology server's Internet connection (available for the operation mode Wireless AP only): Enable this option to allow network devices that are within the local network where your Synology Router is located to connect to the same VPN server.
   • Reconnect when the VPN connection is lost: If the VPN connection is unexpectedly lost, the system will attempt to re-establish the connection five times, attempting once every 30 seconds.
7. Click Apply.

To create an L2TP/IPSec profile:

1. When prompted to choose a VPN connection method, choose L2TP/IPSec, and then click Next.
2. Pick a name for the new profile, specify the IP address of the VPN server you want to establish a connection with, and enter your username and password for the server. You'll also need to enter the pre-shared key for the VPN server. Then click Next.¹
3. Choose one of the following authentication protocols from the Authentication menu to protect VPN client's password during authentication:²
   • PAP: The password will not be encrypted.
   • CHAP: The password will be encrypted using CHAP (Challenge-Handshake Authentication Protocol).
   • MS CHAP: The password will be encrypted using Microsoft CHAP version 1.
   • MS CHAP v2: The password will be encrypted using Microsoft CHAP version 2.
4. Tick any of the following checkboxes depending on your needs:
   • Use default gateway on remote network: Enable this option to route the network traffic of the Synology Router to the specified VPN server.
   • Allow other network devices to connect through this Synology server's Internet connection (available for the operation mode Wireless AP only): Enable this option to allow network devices that are within the local network where your Synology Router is located to connect to the same VPN server.
   • The server or clients are behind the NAT device: By default, L2TP/IPSec protocol does not allow connecting to a VPN server behind a NAT device. Enable this option to bypass this limitation, allowing the Synology Router to connect to an L2TP/IPSec VPN server behind a NAT device.
   • Reconnect when the VPN connection is lost: If the VPN connection is unexpectedly lost, the system will attempt to re-establish the connection five times, attempting once every 30 seconds.
5. Click Apply.

IPv6 settings

Synology Router devices support IPv4/IPv6 dual-stack schemes. This means that IPv4 and IPv6 can work simultaneously on your Synology Router.

To establish an IPv6 Internet connection for your Synology Router, follow the steps below:

1. Go to Network Center > Internet > Connection.
2. Click the IPv6 setup button.
3. Select one of the following IPv6 types from the drop-down menu and save the settings:
   • Auto: IPv6 setup is Auto by default.
   • Manual: Manually set up IPv6 by entering information into the IPv6 address, Prefix length, and Default gateway checkboxes.
   • 6in4: Connect to the IPv6 network through a tunnel broker. You will need to fill in the IPv6 address, Prefix length, Prefix, and Remote server IPv4 address. This requires a public IPv4 address.
   • 6to4: Connect to the IPv6 network through a tunnel broker utilizing anycast. This requires a public IPv4 address.
   • 6rd: Rapidly connect to the IPv6 network through a tunnel broker deployed by your ISP.
   • DHCPv6-PD: Obtain an IPv6 prefix from the DHCP server via prefix delegation within your LAN. This requires ISP support and only works in router mode.
   • IPv6 Relay: Connect to the IPv6 network through upper layer WAN services.
   • FLET'S IPv6 service: Connect to the IPv6 network through FLET'S ISPs.
   • Off: Disable IPv6 support.

Other Internet settings

Secondary interface

The secondary WAN interface ensures high availability of your Internet connection. To set it up, select Enabled from the Enable secondary interface drop-down menu, and then configure the Connection type. You can also make the best of the secondary interface by arranging Smart WAN plans.

Manually configured DNS

The Domain Name System (DNS) resolves easy-to-memorize Internet addresses to the numeric addresses that Internet-connected devices use. When your Synology Router connects to a domain name, its DNS server is responsible for querying the site's IP address, allowing your Synology Router to access the website’s information. Under the Manually Configure DNS Server section, you can specify a preferred DNS server along with an alternative one.

Energy saving

You can Enable Energy-Efficient Ethernet (EEE) to save power during periods of low data activity.

I can't connect to the Internet. What can I do?

1. Make sure that all equipment is connected properly. For example, check if the modem and Synology Router and both plugged into power outlets and powered on.
2. Restart the modem and Synology Router.
3. Check your ISP settings:
   • See if the available connection types detected (such as Auto, DHCP, or PPPoE) are consistent with what your ISP provides.
   • Check your ISP's special settings, as some ISPs may require you to configure additional settings, such as DHCP options, IPTV/VoIP, or PPTP.
4. Reset your Synology Router.