QNAP Systems Ts 253 User Guide

							211 
 
Internet. Virtual Switches could also be used to bridge 1 Gigabit, 10 Gigabit, 40 Gigabit, and 
Thunderbolt environments just as a physical switch could. 
 
 
 
Setting Up a Virtual Switch 
To set up a Virtual Switch, go to “Main Menu” > “Network & Virtual Switch” > “Virtual 
Switch”, click “Add”. Choose between Basic Mode and Advanced Mode. In Basic Mode will, 
the Virtual Switch will be automatically assigned an IP address. Advanced Mode allows the 
user to use a dynamic IP, static IP, or no IP (used for external or isolated networks). 
Advanced mode also gives the user the option to enable NAT and DHCP server for the 
virtual switch. 
 
Using Basic Mode: 
1. Select Basic Mode in the Create a Virtual Switch window. 
2. Select the adapters to connect to the Virtual Switch. It is recommended to enable the 
Spanning Tree Protocol to avoid bridge loops.  
3. Click Apply. 
 
Using Advanced Mode: 
1. Select Advanced Mode in the Create a Virtual Switch window.  
						

							212 
 
2. Select the adapters to connect to the Virtual Switch. It is recommended to enable the 
Spanning Tree Protocol to avoid bridge loops. Click “Next”.  
3. Choose to use a dynamic, static, or no IP address for the Virtual Switch. 
To use static IP, choose to use the same network settings as another adapter or 
manually enter the network information by filing in the Fixed IP Address, Subnet Mask, 
and Default Gateway fields. 
4. Click “Next”. 
5. Select NAT to enable NAT. 
Note:  
NAT cannot be enabled on the default gateway. 
The IP address of Virtual Switch cannot be in the ranges that do not support IP 
forwarding (for example, 127.xxx.xxx.xxx, 169.254.xxx.xxx, 192.0.2.xxx, 
198.51.100.xxx). 
Ensure that the IP address of the Virtual Switch is not in the subnet of any other 
interfaces in use. 
 
6. To enable DHCP server, select “Enable DHCP Server” and fill in the following fields: 
Start IP, End IP, Subnet Mask, Lease Time: Set the range of IP addresses allocated 
by the NAS to the DHCP clients, the subnet mask and the lease time. The lease time 
refers to the time that an IP address is leased to the clients. During that time, the IP 
address will be reserved to the assigned client. When the lease time expires, the IP 
address can be assigned to another client. 
Default Gateway: Enter the IP address of the default gateway for the DHCP server. 
DNS Server: Specify a DNS server for the DHCP server. Refer to the DNS Server section 
in this chapter for more information. 
WINS Server (optional): WINS (Windows Internet Naming Service) resolves Windows 
network computer names (NetBIOS names) to IP addresses, allowing Windows 
computers on a network to easily find and communicate with each other. Enter the IP 
address of the WINS server on the network if available. 
DNS Suffix (optional): The DNS suffix is used for resolution of unqualified/incomplete 
host names. 
TFTP Server & Boot File (optional): The NAS supports PXE booting of network 
devices. Enter the IP address of the TFTP server and the boot file (including directory on 
the TFTP server and file name.) For remote booting of devices, enter the public IP 
address of the TFTP server. 
Note: To avoid IP address conflicts, do not enable DHCP server if there is another DHCP 
server running on the local network or network access errors 
 
7. Click “Next”.  
						

							213 
 
8. Confirm the Virtual Switch settings and click “Apply” to continue. 
 
 
Thunderbolt to Ethernet (T2E) 
Thunderbolt to Ethernet functionality allows the Thunderbolt port to act as an Ethernet 
connection. 
There are two methods of setting up Thunderbolt to Ethernet using your NAS. It is 
recommended that users use Qfinder Pro to set up Thunderbolt to Ethernet. 
To set up T2E manually (without Qfinder Pro): 
1.  Go to Network & Virtual Switch and create a virtual switch with a Thunderbolt (See Set up 
a Virtual Switch for more information). 
2.  Optional: Run the following commands in Terminal as an administrator on your MAC to 
temporarily change your network settings: 
sudo sysctl net.inet.tcp.path_mtu_discovery=0 
sudo sysctl net.inet.tcp.tso=0 
Rebooting the Mac will undo these settings. 
3.  Run the following command in Terminal as an administrator on your MAC to permanently 
apply the settings: 
sudo bash –c ‘printf 
“#QNAP\nnet.inet.tcp.path_mtu_discovery=0\nnet.inet.tcp.tso=0\n#QNAP\n” >> 
/etc/sysctl.conf’ 
This command adds two lines to the sysctl.conf file. 
To access the LAN using T2E, set PMTU to 0 (default value is 1): 
net.inet.tcp.path_mtu_discovery=0 
To access the Internet, set TSO to 0 (default value is 1): 
net.inet.tcp.tso=0 
Note:  
Qfinder Pro will automatically configure your Mac settings file: /etc/sysctl.conf. 
T2E Internet functionality reduces the MTU size of packets sent from the Mac and thus 
affects upload speeds. To revert to the default settings, use Qfinder Pro or Terminal to 
set net.inet.tcp.tso to 1). 
T2E with Thunderbolt 2 on Windows may have connectivity issues due to Thunderbolt 
drivers. This issue does not affect Thunderbolt 3 with Windows.  
						

							214 
 
 
 
 
DHCP Server 
A DHCP (Dynamic Host Configuration Protocol) server assigns IP addresses to clients on a 
network. Select the interface(s) to set the NAS as a DHCP server if there are none on the 
local network where the NAS is located. 
 
Note:  
Do not enable DHCP server if there is one on the local network to avoid IP address 
conflicts or network access errors. 
The DHCP server option is only available to Ethernet 1 when both LAN ports of a dual 
LAN NAS are connected to the network and configured as standalone IP settings. 
 
To set up a DHCP server on the NAS: 
1.  Go to “Control Panel” > “Network & File Services” > “Network & Virtual Switch” > “DHCP Server”, 
then click “Add”. 
2.  Select the interface to set as DHCP server. Click “Next”. 
3.  Select to “Enable DHCP server on the original network”, “Reassign an IP address to the adapter and 
enable a DHCP server on a new subnet”, or “Enable DHCP server for another subnet”. Click “Next”. 
4.  Fill out the fields below: 
Start IP, End IP, Subnet Mask, Lease Time: Set the range of IP addresses allocated 
by the NAS to the DHCP clients, the subnet mask and the lease time. The lease time 
refers to the time that an IP address is leased to the clients. During that time, the IP 
address will be reserved to the assigned client. When the lease time expires, the IP 
address can be assigned to another client. 
Default Gateway: Enter the IP address of the default gateway for the DHCP server.  
DNS Server: Specify a DNS server for the DHCP server. Refer to the DNS Server section 
in this chapter for more information. 
WINS Server (optional): WINS (Windows Internet Naming Service) resolves Windows 
network computer names (NetBIOS names) to IP addresses, allowing Windows 
computers on a network to easily find and communicate with each other. Enter the IP 
address of the WINS server on the network if available. 
DNS Suffix (optional): The DNS suffix is used for resolution of unqualified/incomplete 
host names. 
TFTP  Server  &  Boot  File  (optional): The NAS supports PXE booting of network devices. 
Enter the IP address of the TFTP server and the boot file (including directory on the TFTP 
server and file name.) For remote booting of devices, enter the public IP address of the 
TFTP server.  
						

							215 
 
5. Click “Apply”. 
 
 
 
System Default Gateway 
You can choose to have the system automatically detect the default gateway or manually set 
the interface as the default gateway:  
The system will detect adapters that can reach the Internet and set one of these as the 
default gateway: For connecting to Internet, you can choose this option and the system 
will choose an adapter that can reach the Internet and set it as the default gateway. 
Manually choose the systems default gateway: Administrators can assign two adapters 
as the first and second default gateway for failover protection. Both physical adapters 
and virtual switches can be assigned. To assign the primary and secondary default 
gateways, tick the option If this adapter cannot reach the network, the system will use 
this second priority as the default gateway. Once the first priority is connected, the 
system will revert to it as the default system gateway. Note that this failover protection 
option is only available when both of the interfaces on the NAS are connected to the 
Internet. 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  
						

							216 
 
 
 
 
 
Network Access 
 
Go to Control Panel > Network & File Services > Network Access.  
 
 
Service Binding 
 
NAS services run on all available network interfaces by default. You can bind services to one 
or more specific network interfaces. First check Enable Service Binding and available 
network interfaces on the NAS will be shown. Select at least one network interface that each 
service should be bound to. Then click Apply. Users will only be able to connect to services 
via the specified network interfaces. If the settings cannot be applied, click Refresh to list 
the current network interfaces on the NAS and configure service binding again. 
 
Note:  
Service binding is only available for NAS models with multiple network interfaces 
(wired and wireless). 
Service binding is not available for network interfaces that are connected to virtual 
switches. 
After applying service binding settings, the connection of currently-online users will be 
kept even if they were not connected to services via the specified network interfaces. 
The specified network interfaces will be used for the next connected session. 
 
Proxy 
  
						

							217 
 
To allow the NAS to access the Internet through a proxy server to update the firmware, get 
new virus definitions, and to download Apps, first enable this service and enter the proxy 
server settings. 
 
DDNS Service 
 
To allow remote access to the NAS using a domain name instead of a dynamic IP address, 
enable the DDNS service. 
The NAS supports the DDNS providers: http://www.dyndns.com, http://update.ods.org, 
http://www.dhs.org, http://www.dyns.cx, http://www.3322.org, http://www.no-ip.com, 
http://www.Selfhost.de, http://www.oray.com. 
 
Note: Some of these DDNS services are not free. 
 
Additional Reference: 
How to set up proxy server on QNAP Turbo NAS for optimized website access. 
Set up DDNS Service for Remote Internet Access to QNAP NAS.  
						

							218 
 
 
 
 
Win/Mac/NFS 
 
Go to Control Panel > Network & File Services > Win/Mac/NFS to configure networking 
services.  
 
 
In this chapter, the following topics are covered: 
Microsoft Networking 
Apple Networking 
NFS Service 
 
Microsoft Networking 
 
To allow access to the NAS on Microsoft Windows Network, enable file service for Microsoft 
networking. Also specify how users will be authenticated. 
 
Standalone Server 
Use local users for authentication. The NAS will use local user account information (created 
in Privilege Settings > Users) to authenticate users who access the NAS. 
Server Description (optional): Describe the NAS so that users can easily identify it on a 
Microsoft Network. 
Workgroup: Specify the workgroup to which the NAS belongs. A workgroup name 
supports up to 15 characters but cannot contain:  + = / \ : | * ? < > ; [ ] % , `  
						

							219 
 
 
AD Domain Member 
Use Microsoft Active Directory (AD) to authenticate users. To use this option, enable Active 
Directory authentication in Privilege Settings > Domain Security and join the NAS to an 
Active Directory. 
 
LDAP Domain Authentication 
Use an LDAP directory to authenticate the users. To use this option, enable LDAP 
authentication and specify the settings in Privilege Settings > Domain Security. When 
this option is enabled, you need to select either the local NAS users or the LDAP users that 
can access the NAS via Microsoft Networking. 
 
Advanced Options 
WINS server: If you have a WINS server on your network and want to use this server, 
enter the WINS server IP. The NAS will automatically register its name and IP address 
with the WINS service. Do not enable this option if you are unsure about the settings. 
Local Domain Master: A Domain Master Browser is responsible for collecting and 
recording resources and services available for each PC on the network or a workgroup of 
Windows. When you find the waiting time for loading network resources to be too long, it 
may be caused by a failure of an existing master browser or a missing master browser 
on the network. If there is no master browser on your network, select the option 
Domain Master to configure the NAS as the master browser. Do not enable this option 
if you are unsure about the settings. 
Allow only NTLMv2 authentication: NTLMv2 stands for NT LAN Manager version 2. 
When this option is enabled, login to the shared folders by Microsoft Networking will only 
be allowed using NTLMv2 authentication. If the option is disabled, NTLM (NT LAN 
Manager) will be used by default and NTLMv2 can be negotiated by the client. The 
default setting is disabled. 
Name resolution priority: You can select to use DNS server or WINS server to resolve 
client host names from IP addresses. When you set up your NAS to use a WINS server or 
to be a WINS server, you can choose to use DNS or WINS first for name resolution. 
When WINS is enabled, the default setting is Try WINS then DNS. Otherwise, DNS will 
be used for name resolution by default. 
Login style: DOMAIN\USERNAME instead of DOMAIN+USERNAME for FTP, AFP, 
and File Station: In an Active Directory environment, the default login formats for the 
domain users are: 
o Windows shares: domain\username 
o FTP: domain+username 
o File Station: domain+username 
o AFP: domain+username  
						

							220 
 
       When you enable this option, users can use the same login name format 
(domain\username) to connect to the NAS via AFP, FTP, and File Station. 
Automatically register in DNS: When this option is enabled and the NAS is joined to 
an Active Directory, the NAS will automatically register itself in the domain DNS server. 
This will create a DNS host entry for the NAS in the DNS server. If the NAS IP changes, 
the NAS will automatically update the IP in the DNS server. 
Enable trusted domains: Select this option to load users from trusted Active Directory 
domains and specify their NAS access permissions in Privilege Settings > Shared 
Folders. Domain trusts are only set up in Active Directory, not on the NAS.) 
Enable Asynchronous I/O: Enable this option to increase SAMBA performance. Please 
note: we strongly recommend using a UPS when this option is enabled. 
Enable Highest SMB version: Please choose the version of the SMB protocol (Server 
Message Block) for your Microsoft Networking operations. If you are unsure, please use 
the default option. 
 
Apple Networking 
 
To connect to the NAS from Mac OS X, enable Apple Filing Protocol. If the AppleTalk network 
uses extended networks and is assigned with multiple zones, assign a zone name to the 
NAS. Enter an asterisk (*) to use default settings. This setting is disabled by default. To 
allow access to the NAS from Mac OS X 10.7 Lion, enable DHX2 authentication support. 
Click Apply to save the settings. You can use the Finder to connect to a shared folder from 
Mac. Go to Go > Connect to Server, or simply use the default keyboard shortcut 
Command+k. Enter the connection information in the Server Address field, such as 
afp://YOUR_NAS_IP_OR_HOSTNAME. Here are some examples: 
afp://10.8.12.111 
afp://NAS-559 
smb://192.168.1.159 
 
Note: Mac OS X supports both Apple Filing Protocol and Microsoft Networking. To connect 
to the NAS via Apple Filing Protocol, the server address should start with afp://. To 
connect to the NAS via Microsoft Networking, please use smb://.