No Access from Internet

[Baxter]

Hi All,

Ive got a N5200B Pro in my local Network, which go's out on a Zywall 2.

The Network Config is:

NAS
Aggregation: Load Balance
WAN IP: 192.168.1.100 /24
LAN IP: 192.168.2.254 /24

Zywall
LAN IP:192.168.1.1 /24
WAN IP: XXXXXX

From the LAN i can Access the config Webpage from the Nasbox. FTP and everything else works well. But when i try to access it from the Internet via FTP or other Services to my Nasbox it doesnt work. Port Forwarding and Firewall Rules are all set well.

Firewallrules are:
Portforward: 443/21/20 -> 192.168.1.100 (Nasbox)
WAN/LAN: 443/21/20 -> Permit

Without these Options i can access my WANIP from LAN and the Zywall configpage appears (IP Loopback = On). But as soon as i activate Forwarding it doesnt respond. I recieve a Timeout.


The Question is also, to access my files on the Nasbox i have to Map the Drive or go trough FTP. But on some Site i also read that there is a WebInterface which i can Access the Files direct trough IE.

So the Problem is no Access to my Nasbox from Internet.
And the Question, if there is a Web Interface for File Access.

Used Windows is XP Pro

Thanks for help in Advance

Regards


//edit:
Sry, forgot to mention. This Problem occurs nomatter if i try to access via IP or DynDNS from LAN (IP Loopback = On) or WAN. Again, DynDNS works well cause Zywall is accessible but the not the Nasbox.

[peterfu]

Hi Baxter,
if you forward the https port (443) to Your NAS and the try to access Your WAN IP via https the request is forwarded to the NAS. To switch on https access on the NAS go in the N5200 admin menu to Network->Services and enable https access. Then it should work.

Yes, You cann access the files via http or https (of course You have to enbale that - see above) - but file access is not possible with the admin account. You have to login in the web interface with a user account and then - depending on the user rights you are able to access the files.

br
Peter

[Baxter]

Hi Peter,

Thanks for your Interest. About the Https Acces. It is already enabled in the config of the Nasbox. I also already disabled anonymous FTP Logins and enabled NFS. I want to use the HTTPS access for m the Nasbox, because the HTTP (80) is for the Zywall itself. But you pointed out something very important. Sometimes when i try to access the (HTTPS ://[domain]) i recieve a Message that the certificate is doubtful and if i want to proceed. But it doesnt go further, it just Timeouts there.

And that with the Login is just great. I always thought that there is something else, but never tried to use a Useraccount ^^. Thanks that Thecus delivers such a great Manual ;-p ^^

This leads me to another question. Is it possible to view *.avi Files, or other Moviefiles, directly through the Net, without first downloading it? This would be such a great benefit for Administration and Bandwith. When i go trough the FTP or HTTPS Access it always wants to first download it.


Thanks again for your help Peter!

Regards
Baxter

[peterfu]

Hi Baxter,
Do You mean viewing via the internet from outside ?
If Yes, then the best way would be to build up a VPN between the remote machine and Your LAN - the Zywall is able to do that. Then the remote PC is handled like a local one and also the access to the NAS.
br
Peter

PS : some remark to Your setup - I personally have disabled the configuration pages for my Zywall from the outside - just for security reasons

[Baxter]

Hi Peter,

Must be afternoon on your side i think. Thanks for your fast Responds ^^

Because the viewing thing. Yes i ment about watching Moviefiles from the Internet, like a caffee or somewhere else.
I never thought of a VPN Connection. Thats a great Idea! Sure will try that out. Do you got spontaneously a good VPN Software for the Laptop?

What i was thinking first, was to automaticaly stream the Files. I mean like i click a moviefile on the HTTPS and it starts a Stream, instead of downloading it. This would give me the opportunity to access the files without any prerequisite, like a VPN Software.

Many Regards
Baxter

Re P.S. i just temporarily activated the remote management for my zywall, to also test the settings Onsite from the outside. But sure thanks for the advice.

[peterfu]

Originally Posted by Baxter

Hi Peter,

Must be afternoon on your side i think.

not realy - I live in Austria

What i was thinking first, was to automaticaly stream the Files. I mean like i click a moviefile on the HTTPS and it starts a Stream, instead of downloading it. This would give me the opportunity to access the files without any prerequisite, like a VPN Software.

For that you need a streaming server on the NAS and some special web pages.
br
Peter

[Baxter]

Well greetings to Austria then,

I FINALLY got an Answer from Thecus-Support itself about my Access problem. And this was the answer to it:

Hi,

OK, we see the "issue" on screen shot 3.jpg.

Can you disable Link Aggregation, it should fix the problem. Currently we are aware of this problem, when Link Aggregation is enabled, N5200 ignores the default gateway entry. Sorry !

Next firmware release is scheduled for Dec.

Best Regards

I posted it beacuse you could be also interested in. Also interesting is, that the next Firmware realease will be on December.


O So this solves my Problem with the Access from the Web thanks to Thecus-Support.
O Also solved is the Question about the Web Interface for User File Access, which is the same page as the config thanks to peterfu.
O Also solved is the Question about Videofile access without download. The Streamversion would be to complicated and hard to find/install and config, so decided to go the VPN way. We've got Cisco VPN Client at work, so i hope i can use this one with my Zywall. Never did VPN before so whish me luck ^^. But again thanks perterfu for this Input

X This would leave the only question open: Is it possible to hide Folders on Web&FTP access to users, which dont have rights at all to them?

Regards
Baxter

[peterfu]

Originally Posted by Baxter

X This would leave the only question open: Is it possible to hide Folders on Web&FTP access to users, which dont have rights at all to them?

No, thats not possible.
For FTP exists a module FTPACCESS, which hides folders, but starting with FW 2.00.01 every reboot resets everything to the original behaviour.
br
Peter

[Baxter]

Thanks for the Info again. This means that i have to use VPN with Drive Mapping to get this work.

Do you also have expierience with the Zywall IPSec VPN Software? Because i dont have any clue how to create a new VPN Rule in my Zywall. It Connects but dont shares any Info. Thanks.

lg
Baxter

[peterfu]

Hi Baxter,
sorry - no experience with the Zywall Software - I do it in a different way.
I have a linux server running - using now mainly as backup device for the N5200 - there runs an openvpn server and my clients have the openvpn clients installed. So I connect all my clients to this openvpn server via port forwarding in the Zywall.
br
Peter