How to use CyberGhostVPN on Synology NAS via OpenVPN

This tutorial guide will take you through the steps of setting up a VPN on your Synology using OpenVPN.

Download OpenVPN configuration files

1. Login into your CyberGhostVPN account and then click on VPN 
2. Scroll down to Manual setup and then click on Configure Device

• Protocol :  Make sure to use only OpenVPN 2.3 or OpenVPN 2.3 TCP
  
• Country : Since native protocol connections can only be used with a single server, you must now choose the country from which you want to surf; the server to be used in this country will be automatically chosen by CyberGhost.
• Server Group : Select the available server group from the list.
  

  OpenVPN 2.3 allows higher speed than the TCP version but can result in broken downloads in some cases. This is the default setting;
  OpenVPN 2.3 TCP allows more stable connections than the UDP version but is a bit slower. Choose this version, if you have recurrent connection issues such as sudden disconnections;

  Once the desired parameters are chosen, save them with "Save Configuration"

To view the OpenVPN 2.3 credentials that are generated for you on the configuration dashboard,
press "View"

After setting up your connection preferences, please take note of the following :

• Server Group : This is the address of the country (server) you want to be connected with, e.g. 'xx-xx-ca.cg-dialup.net'. This address changes with every country you have chosen in the step before. The actual single server to be used will be chosen automatically by CyberGhost.
• User name : A solely for this protocol generated user name. This is NOT your regular CyberGhost account user name, it's used only to authenticate with our servers via Manual Configurations.
• Password : A solely for protocol usage generated password. This is NOT your regular CyberGhost account password, it's used only to authenticate with our servers via Manual Configurations.

Once done, please download the configuration file. For that click on "Download Configuration" and download the config file to your computer (it's recommended that you create a special folder for the config, somewhere accessible like your Desktop and Extract/Copy the contents of the .zip file there.

Important: please keep your username and password obtained during the configuration process at hand, you will be asked to enter them later in the setup.

The archive file contains 4 files that need to be extracted :

• Server security certificate: ca.crt
• Client safety certificate: client.crt
• Key file: client.key
• OpenVPN configuration file: openvpn.ovpn

 

Turn off IPv6

Before enabling VPN on your Synology, CyberGhost VPN highly recommends you to disable IPv6 to prevent IPv6 traffic from leaking out of the VPN tunnel

To turn off IPv6, go to Control Panel > Network > Network Interface.

 

Click the Network Interface tab and then click the LAN menu to expand it.

Click Edit

In the Edit menu, click the IPv6 tab. For IPv6 setup, select Off. Click OK.

After disabling IPv6, reboot your Synology.

 

Create a new VPN profile

To add a new VPN profile, we need to return to the Network Interface settings. Go to Control Panel > Network > Network Interface.

Select Create > Create VPN Profile.

 

Set up your VPN profile

From the VPN Connection Method screen, select OpenVPN (via importing a .ovpn file) and click Next.

On the General Settings screen, enter the following information :

• Profile name : CyberGhost VPN (or a name to help you remember the connection)
• User name : user name that you have obtained during the configuration process
• Password : the password that you have obtained during the configuration process

Then, you will continue the setup by adding the 4 files downloaded from your online account :

1. in the field '.ovpn files' -> import the .ovpn file
2. in the field 'CA certificate' -> import the file ca.crt
3. in the field 'Client certificate' -> import the file client.crt 
4. in the field 'Client key' -> import the file client.key

Click Next.

Check the boxes for Use default gateway on a remote network and Reconnect when the VPN connection is lost.

The box for Allow other network devices... is optional.

Click Apply to continue.

 

Connect to the VPN server

You should now see your new VPN profile in the network interface window. Click on your new VPN profile and then click Connect.

After a successful connection, the status of the profile will change to Connected and that's it!