Page 1 of 1

[Help] Access NAS local IP from an external VPN

Posted: 19 Aug 2025, 04:05
by wander1236
I have a site-to-site mesh VPN set up between a few locations. For the most part, it lets me access IPs on the other locations' LANs as if they were local, but TerraMaster seems to block incoming connections from outside of the subnet of the local address it gets. I've seen references to allowing VPN servers configured on the NAS itself to access the local network, but that doesn't address my issue.

NAS: F4-424 Max
TOS: 6.0.770-00002

Things I've tried:
  • Adding a firewall rule to allow all incoming ports/protocols from all incoming IPs.
  • Manually setting iptables to allow all connections.
  • Disabling all the security settings under the General tab.
  • Disabling DoS Protection.
  • "Allow Telnet / SSH access only within the local network" is disabled.
I have port forwarding set up for the web UI and some other services, so I can use the external URL for those, but I don't have SSH forwarded, for example. I also know about TNAS.online, which doesn't give access to SSH either. How can I tell the NAS to allow connections from IPs not on its subnet?

Re: [Help] Access NAS local IP from an external VPN

Posted: 19 Aug 2025, 14:16
by CursaYang
wander1236 wrote: 19 Aug 2025, 04:05 I have a site-to-site mesh VPN set up between a few locations. For the most part, it lets me access IPs on the other locations' LANs as if they were local, but TerraMaster seems to block incoming connections from outside of the subnet of the local address it gets. I've seen references to allowing VPN servers configured on the NAS itself to access the local network, but that doesn't address my issue.

NAS: F4-424 Max
TOS: 6.0.770-00002

Things I've tried:
  • Adding a firewall rule to allow all incoming ports/protocols from all incoming IPs.
  • Manually setting iptables to allow all connections.
  • Disabling all the security settings under the General tab.
  • Disabling DoS Protection.
  • "Allow Telnet / SSH access only within the local network" is disabled.
I have port forwarding set up for the web UI and some other services, so I can use the external URL for those, but I don't have SSH forwarded, for example. I also know about TNAS.online, which doesn't give access to SSH either. How can I tell the NAS to allow connections from IPs not on its subnet?
Hello, we are currently unable to reproduce the issue you mentioned.
We need to troubleshoot it remotely.
Please go to our official website's live chat to schedule a convenient time for remote assistance.
When scheduling, please attach the link to this post.