newbie VPN questions

njitgrad

Distinguished
Jun 13, 2012
124
0
18,690
I'm in the process of learning about establishing a VPN connection and I have some specific questions that I can't seem to find the answers to.

Just a short while ago I created a VPN connection between my Galaxy S4 and my new Synology NAS at home. It was definitely successful because both the phone and the NAS indicated a connection was made. The only reason I did this was because I learned that a VPN capability was built into the NAS.

So now when I am out and about my daily business and decide to connect to a public wifi hotspot:

1) Do I enable my VPN just before connecting to the public network? Or should I always have VPN enabled? It is kind of a pain to get to it in my menu system to enable it.

2) How does the mobile device actually establish a connection with my NAS VPN server at home?Does my VPN configuration on my phone somehow know my last known external IP address from the setup process?

3) What if my external IP address changes for whatever reason? Will the VPN connection process fail or will it automatically update itself on my phone when I am within my WiFi connection's range?

4) Can I configure other VPN connections on other mobile device (like Galaxy Tab 3s) without those devices actually being at the physical location of my NAS which hosts the VPN server?

5) Other than what my phone is capable of sending and receiving through the VPN connection do I somehow gain the ability to do other things on my network? Could I remote desktop to my PC (which has a static IP address) for example?
 
Solution
If you connect at home, your VPN server will be recognized by your local private IP Address set by your router (i.e. the router is 192.168.0.1, the NAS is 192.168.0.2), and that IP address won't be recognized unless you connect to your router. If you go to a public wi-fi and try to connect, it won't find your VPN.

Your current public IP can be found by going to www.whatismyip.com, this will give your current IP address - but unless your configure your router to send external requests of that IP address to your NAS, it still won't find your VPN.
1) It depends upon the VPN software you have. Some require an active connection prior to enabling the VPN - others connect when the connection is available.

2) Again, it would depend upon the VPN software you are using.

3) Again, it would depend upon the VPN software you are using.

4) As long as the VPN softare is available for a device (for the Galaxy Tab 3s - you would need VPN software for Android).

5) VPN will allow for remote desktop applications to connect - you just need to know the VPN's IP address for the device.

I utilize LogMeIn Hamachi (it costs $29 per year for 30 devices), and I can connect anywhere at any time - and it gives me a pop-up that has all the IP addresses of the devices active on the network. It has connectivity for Windows, MAC OS, Linux (beta), Android and IOS....and the paid version allows for idle connections (no internet access). The hub is through LogMeIn's website, so if you IP changes, it automatically knows when the device reconnects to the network. And it has one of the strongest encryption methods.

I used to go through all the manual configurations with other VPN software which was a royal pain....Hamachi makes it easy...
 

njitgrad

Distinguished
Jun 13, 2012
124
0
18,690
I didn't realize that you actually needed VPN software. My NAS at home has a VPN server and I configured my phone settings (no software app involved at all) to connect to it. Isn't that all there is to it? I just assumed that my android phone registered my home network's current external IP address in the configuration process and now when I enter a public network it will attempt to connect to that saved IP address. My router has the correct ports opened which will establish communication with the VPN server on my NAS.

Or am I not even in the ballpark?
 
If you have a static IP address assigned by your ISP, and you configure the router to pass that IP to the NAS, and the NAS is running VPN software, then your phone can find it anywhere (it would be the IP address assigned by the ISP). If you don't have that configuration, every time your IP address changes (router reboot can trigger, your ISP can force a change, etc.), you will need to reconfigure all devices that connect - possibly including your NAS to find the new IP address.

If you connected at home, your phone found the internal IP address of your NAS more than likely....

This is why I use Hamachi....each device connects to LogMeIn (whose IP address never changes), and then is given a "static IP" inside the VPN.
 

njitgrad

Distinguished
Jun 13, 2012
124
0
18,690
So without a solution like yours I would need to check to see if my mobile device can connect to my VPN server before leaving the house, and hope that it doesn't change while I'm away, right?
 
If you connect at home, your VPN server will be recognized by your local private IP Address set by your router (i.e. the router is 192.168.0.1, the NAS is 192.168.0.2), and that IP address won't be recognized unless you connect to your router. If you go to a public wi-fi and try to connect, it won't find your VPN.

Your current public IP can be found by going to www.whatismyip.com, this will give your current IP address - but unless your configure your router to send external requests of that IP address to your NAS, it still won't find your VPN.
 
Solution