Can only access NAS remotely, not from LAN

FTP Server, File Server, DDNS, SAMBA, AFP, NFS
Locked
Socra
New here
Posts: 4
Joined: Sat May 18, 2019 8:01 pm

Can only access NAS remotely, not from LAN

Post by Socra »

Hello all,

After scraping the internet for a post with a similar issue to the one I have been facing for the past 2 months, I finally resolve to create a thread of my own.

I have a TS-251+ with an up to date QTS running (V4.5.1.1480 Build 20201108 as of Nov 2020).
It is behind my ISP's router that takes care of pretty much everything in my home "network wise" (WLAN, LAN, DHCP and DNS).
On both my NAS and my ISP's router, I have assigned a static LAN address to the NAS's. On the network I also have a printer, two laptops and a phone, all using ISP's router's DHCP.

When at home, I have been able to ping the NAS from both my laptops since I bought it, 4 years ago. FTP, SSH and samba server also working well.
For remote accessing my NAS web services (OpenVPN server, QTS admin page, Plex, Tautulli, NetData, NextCloud, SpeedTest, Transmission, SyncThings, AirSonic...), I have set up NAT rules on my ISP's router to allow any outside request to be correctly forwarded to the NAS's ports, including HTTPS. I use QNAP's Dynamic DNS service to fetch my public IP address (XXXXX.myqnapcloud.com).

All of this has been working like a charm for the past 4 years until 2 months ago.

And then, 2 month ago, I lost access to the NAS when I'm home (i.e. on LAN). I cannot ping it (ping timeouts), I can't access any of the web services mentioned before, nor FTP, SSH or Samba.
BUT, and that's the weird part to me, I can still connect remotely to the NAS's OpenVPN server, Plex, Tautulli, speedTest....
The only thing that does not work in both case (on LAN or remotely) is accessing the QTS's admin page using XXXXX.myqnapcloud.com. Same goes for QFile and other QTS web apps.

I ended up thinking the issue would come from my ISP's router. So replaced it with a brand new one and got the same result. I moved my NAS to a friend's place and once there, everything was back to normal, but this is not a solution, obviously.

Currently, the only way I found to work to access QTS admin page when at home is to connect my laptop directly to the NAS's second LAN interface while enabling a DHCP server on it.
I can also access the QTS admin page when I'm not home by connecting to the NAS's OpenVPN server and then typing "http://192.168.1.XX" (with XX being my NAS's static IP address on LAN) in firefox's URL bar.

So I guess there is something specific to my place's LAN that causes these issues. Does this strange behavior rings any bell to you guys?

I hope I forgot nothing here. Thank you very much for your help.

Regards

Socra
k3lavine
New here
Posts: 5
Joined: Wed Jul 16, 2014 11:48 pm

Re: Can only access NAS remotely, not from LAN

Post by k3lavine »

Your laptop, NAS and Router are all on the same subnet (192.168.1.x)?

If you TRACERT from your laptop to the NAS IP address, what results do you get?
Socra
New here
Posts: 4
Joined: Sat May 18, 2019 8:01 pm

Re: Can only access NAS remotely, not from LAN

Post by Socra »

Hi , thank you for your answer.

Yes they all use the same subnet (192.168.1.x/24).

I'm momentarily living at my gf's place right now because of my country's COVID lock down. So I cannot go easily to my place to run the TRACERT.
But I'll post it here as soon as I can.

Regards

Socra
Socra
New here
Posts: 4
Joined: Sat May 18, 2019 8:01 pm

Re: Can only access NAS remotely, not from LAN

Post by Socra »

Hi k3lavine,

So I finally got back to my place to run a traceroute from my laptop:

Code: Select all

#traceroute to the NAS
$ traceroute 192.168.1.16
traceroute to 192.168.1.16 (192.168.1.16), 64 hops max, 52 byte packets
 1  * * *
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  *^C

# traceroute to my printer
$ traceroute 192.168.1.20
traceroute to 192.168.1.20 (192.168.1.20), 64 hops max, 52 byte packets
 1  192.168.1.20 (192.168.1.20)  138.407 ms  6.167 ms  13.937 ms

# traceroute to my smart TV 
$ traceroute 192.168.1.75
traceroute to 192.168.1.75 (192.168.1.75), 64 hops max, 52 byte packets
 1  * 192.168.1.75 (192.168.1.75)  6.679 ms  3.250 ms
Looks like I can't access it from LAN. But as I said earlier, remotely connecting to my Plex server or to my OpenVPN server running on the NAS does work for some reason.

I attached to this answer screenshots from my router's admin interface. There you can see the router correctly identifying all of my devices.

I have realy no clue of what's happening :(

Socra
You do not have the required permissions to view the files attached to this post.
k3lavine
New here
Posts: 5
Joined: Wed Jul 16, 2014 11:48 pm

Re: Can only access NAS remotely, not from LAN

Post by k3lavine »

Very strange. Have you checked your laptops firewall settings? What is the output from a "route print" in a command prompt.
Socra
New here
Posts: 4
Joined: Sat May 18, 2019 8:01 pm

Re: Can only access NAS remotely, not from LAN

Post by Socra »

Hi k3lavine,

Sorry for the late answer, lock down again :(.

Here is the output of "netstat -nr":

Code: Select all

MBP:~ mainuser$ netstat -nr
Routing tables

Internet:
Destination        Gateway            Flags        Netif Expire
default            192.168.1.254      UGSc           en0
127                127.0.0.1          UCS            lo0
127.0.0.1          127.0.0.1          UH             lo0
169.254            link#6             UCS            en0      !
192.168.1          link#6             UCS            en0      !
192.168.1.16       24:5e:be:6:df:d8   UHLWI          en0    466
192.168.1.20       ac:18:26:4c:47:ad  UHLWI          en0   1174
192.168.1.38       4c:74:bf:86:7:6d   UHLWIi         en0    672
192.168.1.39/32    link#6             UCS            en0      !
192.168.1.254/32   link#6             UCS            en0      !
192.168.1.254      b8:66:85:46:15:1c  UHLWIir        en0   1198
224.0.0/4          link#6             UmCS           en0      !
224.0.0.251        1:0:5e:0:0:fb      UHmLWI         en0
239.255.255.250    1:0:5e:7f:ff:fa    UHmLWI         en0
255.255.255.255/32 link#6             UCS            en0      !

Internet6:
Destination                             Gateway                         Flags         Netif Expire
default                                 fe80::ba66:85ff:fe46:151c%en0   UGc             en0
default                                 fe80::%utun0                    UGcI          utun0
default                                 fe80::%utun1                    UGcI          utun1
default                                 fe80::%utun2                    UGcI          utun2
::1                                     ::1                             UHL             lo0
2001:861:8b40:40d0::/64                 link#6                          UC              en0
2001:861:8b40:40d0:1c2b:2bac:63a6:e4b3  f0:18:98:32:65:d9               UHL             lo0
2001:861:8b40:40d0:34e2:5002:9ec2:98c6  f0:18:98:32:65:d9               UHL             lo0
2001:861:8b40:40d0:ba66:85ff:fe46:151c  b8:66:85:46:15:1c               UHLWI           en0
fe80::%lo0/64                           fe80::1%lo0                     UcI             lo0
fe80::1%lo0                             link#1                          UHLI            lo0
fe80::%en5/64                           link#4                          UCI             en5
fe80::aede:48ff:fe00:1122%en5           ac:de:48:0:11:22                UHLI            lo0
fe80::aede:48ff:fe33:4455%en5           ac:de:48:33:44:55               UHLWIi          en5
fe80::%en0/64                           link#6                          UCI             en0
fe80::42:83ff:fe05:fea%en0              link#6                          UHLWI           en0
fe80::42:e6ff:feab:3160%en0             link#6                          UHLWI           en0
fe80::8f2:2ba2:6208:2d0a%en0            f0:18:98:32:65:d9               UHLI            lo0
fe80::718e:6579:8fe1:90e1%en0           link#6                          UHLWI           en0
fe80::ba66:85ff:fe46:151c%en0           b8:66:85:46:15:1c               UHLWIir         en0
fe80::%awdl0/64                         link#8                          UCI           awdl0
fe80::b800:98ff:feb6:88cf%awdl0         ba:0:98:b6:88:cf                UHLI            lo0
fe80::%llw0/64                          link#9                          UCI            llw0
fe80::b800:98ff:feb6:88cf%llw0          ba:0:98:b6:88:cf                UHLI            lo0
fe80::%utun0/64                         fe80::a85e:5f3f:8b44:48fb%utun0 UcI           utun0
fe80::a85e:5f3f:8b44:48fb%utun0         link#16                         UHLI            lo0
fe80::%utun1/64                         fe80::4dfc:f282:eb34:abfe%utun1 UcI           utun1
fe80::4dfc:f282:eb34:abfe%utun1         link#17                         UHLI            lo0
fe80::%utun2/64                         fe80::df30:5cda:5e6e:e72b%utun2 UcI           utun2
fe80::df30:5cda:5e6e:e72b%utun2         link#18                         UHLI            lo0
ff01::%lo0/32                           ::1                             UmCI            lo0
ff01::%en5/32                           link#4                          UmCI            en5
ff01::%en0/32                           link#6                          UmCI            en0
ff01::%awdl0/32                         link#8                          UmCI          awdl0
ff01::%llw0/32                          link#9                          UmCI           llw0
ff01::%utun0/32                         fe80::a85e:5f3f:8b44:48fb%utun0 UmCI          utun0
ff01::%utun1/32                         fe80::4dfc:f282:eb34:abfe%utun1 UmCI          utun1
ff01::%utun2/32                         fe80::df30:5cda:5e6e:e72b%utun2 UmCI          utun2
ff02::%lo0/32                           ::1                             UmCI            lo0
ff02::%en5/32                           link#4                          UmCI            en5
ff02::%en0/32                           link#6                          UmCI            en0
ff02::%awdl0/32                         link#8                          UmCI          awdl0
ff02::%llw0/32                          link#9                          UmCI           llw0
ff02::%utun0/32                         fe80::a85e:5f3f:8b44:48fb%utun0 UmCI          utun0
ff02::%utun1/32                         fe80::4dfc:f282:eb34:abfe%utun1 UmCI          utun1
ff02::%utun2/32                         fe80::df30:5cda:5e6e:e72b%utun2 UmCI          utun2
Regards
llleite
New here
Posts: 2
Joined: Mon Sep 13, 2021 12:42 am

Re: Can only access NAS remotely, not from LAN

Post by llleite »

did you fix it? I had a similar issue, all my laptops are in same LAN and can ping each other, but none can ping my NAS.
This is driving me crazy!
Locked

Return to “File Sharing”