QNAP WireGuard Remote Access + SMB (Windows, Mac, iPhone, Android) — Secure VPN Setup
In this video on QNAP NAS Private Cloud, I show the clean way to get secure remote access to your QNAP home server while you’re away from home Wi-Fi: set up WireGuard in QVPN Service 3, connect from Windows, Mac mini, iPhone, and Android, then prove it works by accessing SMB file shares through the VPN tunnel.
Remote access can be tricky and beginners often end up exposing services directly to the internet. With a VPN you connect securely first, then your home network is available like you’re at home. I’m only exposing one UDP port for WireGuard — I’m *not* exposing SMB. That’s important.
🛠 What’s covered in this video:
• What you need (QNAP with QVPN Service 3 + WireGuard clients + one router rule)
• Home server setup (static IP + QVPN WireGuard host)
• Router port forwarding (UDP 51820 to the QNAP)
• Clients setup overview across devices
• Using a reusable `client.conf` file to make client setup faster
• Windows client setup (create empty tunnel, add peer, edit config, activate)
• Dynamic DNS setup (myQNAPcloud DDNS)
• Mac mini client setup (same process as Windows)
• iPhone client setup (import config, add peer, update IP, activate)
• Android client setup (import config, regenerate key, add peer, activate)
• SMB/file share tests through the VPN (Windows + Mac)
• TIP: file shares must use server IP, not host name, for VPN access
• Troubleshooting tips (DDNS, port forward, firewall rules, routing, MTU tweaks)
📦 Equipment & apps mentioned (links coming soon):
• QNAP NAS + QVPN Service 3 (WireGuard host)
• WireGuard client apps (Windows / macOS / iOS / Android)
• Home router (UDP port forward rule)
• myQNAPcloud (DDNS)
• SMB file shares (Windows File Explorer / macOS Finder)
• Standard Notes (used to store keys/config details)
🌐 Links:
• GitHub resources (if applicable): https://github.com/workplayhavefun/qn...
💬 Question:
Which device are you trying to connect from — Windows, Mac, iPhone, or Android — and where did it fail (VPN connect or SMB file access)?
#qnap #nas #wireguard #vpn #smb #privatecloud
📌 Chapters:
00:00 Secure remote access to QNAP the clean way
00:07 What we’re building (WireGuard + SMB across all devices)
00:26 Why VPN first (don’t expose SMB to the internet)
00:50 What you need (QNAP host + clients + one router rule)
01:05 Home server prep (check IP, gateway, subnet)
02:18 Router: make QNAP IP static (DHCP reservation)
03:32 QNAP: install/open QVPN Service 3
03:57 QVPN: enable WireGuard host (port 51820, VPN range)
05:15 Router port forwarding (UDP 51820 to QNAP)
07:30 Clients setup overview (why a reusable config helps)
07:49 `client.conf` template explained (keys, allowed IPs, endpoint)
08:44 Windows setup: install WireGuard + create empty tunnel
09:07 Copy host public key into the config
10:07 Dynamic DNS setup (myQNAPcloud DDNS)
11:30 Windows: add peer on QNAP + set keep-alive 25s
13:02 Windows: paste config + update client IP + activate
15:10 Verify handshake + traffic on QVPN
15:52 Mac mini setup (same process, quick run-through)
19:10 iPhone setup (install, import, add peer, update IP, connect)
21:50 Android setup (import, regenerate key, add peer, update IP, connect)
25:35 SMB test on Windows (using iPhone hotspot for “external” test)
26:04 TIP: use server IP in share shortcuts (not host name)
29:08 Enable hotspot + test without VPN (fails) then with VPN (works)
30:59 File transfer test (Windows → QNAP share)
32:37 SMB test on Mac mini (hotspot + VPN + file transfers)
37:37 Troubleshooting checklist (DDNS, port, firewall, routing, MTU)
38:19 Wrap + next steps