Indholdet er maskineoversat. Se Ansvarsfraskrivelse for maskinoversættelse.

Skift til engelsk

How to Set Up Site-to-Site VPN Between QNAP Routers

Sådan opsætter du site-to-site VPN mellem QNAP-routere

Last modified date: 2026-02-11

Applicable Products

QHora-301W

QHora-321

QHora-322

QMiro-201W

QMiroPlus-201W

QuWAN Auto-Mesh VPN Guide

By using two QNAP routers, you can easily connect two different locations, allowing devices at both sites to communicate seamlessly as if they were in the same office.

Before configuration, please organize your network connections as follows:

Simply add both devices to the QuWAN Orchestrator, and the system will automatically establish a Site-to-Site VPN connection for you. This approach not only simplifies the deployment process but also enables unified configuration and centralized management across locations through the QuWAN interface.

1. Network Deployment Strategy

Hub Site (Core Station): Connect your Public IP to the WAN port of this QHora router. This device will act as the "lighthouse" for the connection.
Edge Site (Branch Station): This device does not require a public IP. It will function correctly as long as it has a standard internet connection (even behind a modem or firewall).

Pro Tip: Assigning the Public IP to the Hub ensures that the Edge device can always "find its way home" regardless of its local network environment, automatically establishing a stable connection.

2. Configuration Steps

Step 1: Log in and Enable QuWAN

Ensure both devices are logged in using the same QNAP ID.
In the Organization selection, choose the default "My Organization". Using the default setting makes the process faster and easier!

Step 2: Configure the Hub (The device with a Public IP)

Set the device role to Hub.
The system will automatically detect the Public IP on the WAN port and register it with the cloud Orchestrator.

Step 3: Configure the Edge (The second device)

Set the device role to Edge.
Verify IP Segments: To avoid connection conflicts, ensure that the LAN IP ranges of the two devices do not overlap.
- Example: If the Hub uses 192.168.1.x, set the Edge to 192.168.2.x.

3. Automatic Connection (Auto-Mesh)

Once the setup is complete, the two QHora routers will pair automatically via My Organization:

The Edge device will proactively establish a secure connection to the Hub.
You do not need to configure complex Port Forwarding or firewall rules; QuWAN handles the encrypted tunnel automatically.

Quick Checklist

Same Account: Are both devices logged into the same QNAP ID?
Default Organization: Have both devices joined "My Organization"?
Correct Roles: Is the device with the Public IP set as the Hub?
Unique Segments: Are the LAN IP ranges different at both locations?

Once finished, you will see a green line connecting the two QHora routers on the QuWAN Orchestrator dashboard, indicating that the Site-to-Site VPN has been successfully established.

Gældende produkter

QHora-301W

QHora-321

QHora-322

QMiro-201W

QMiroPlus-201W

QuWAN Auto-Mesh VPN-guide

Ved at bruge to QNAP-routere kan du nemt forbinde to forskellige lokationer, så enheder på begge steder kan kommunikere problemfrit, som om de var på samme kontor.

Før konfigurationen skal du organisere dine netværksforbindelser som følger:

Tilføj blot begge enheder til QuWAN Orchestrator, og systemet vil automatisk etablere en Site-to-Site VPN -forbindelse for dig. Denne tilgang forenkler ikke kun implementeringsprocessen, men muliggør også enhedskonfiguration og centraliseret styring på tværs af lokationer gennem QuWAN-grænsefladen.

1. Netværksimplementeringsstrategi

Hub-site (kerne station): Tilslut din offentlige IP til WAN-porten på denne QHora-router. Denne enhed vil fungere som "fyrtårnet" for forbindelsen.
Kant-site (filial station): Denne enhed kræver ikke en offentlig IP. Den vil fungere korrekt, så længe den har en standard internetforbindelse (selv bag en modem eller Firewall).

Pro Tip: Tildeling af den offentlige IP til Hub sikrer, at Kant-enheden altid kan "finde vej hjem" uanset dens lokale netværksmiljø, og automatisk etablere en stabil forbindelse.

2. Konfigurationstrin

Trin 1: Log ind og aktiver QuWAN

Log ind på administrationsgrænsefladen for begge routere og naviger til QuWAN -menuen:

Sørg for, at begge enheder er logget ind med samme QNAP ID.
I organisationsvalget skal du vælge standarden "Min organisation". Brug af standardindstillingen gør processen hurtigere og lettere!

Trin 2: Konfigurer Hub (Enheden med en offentlig IP)

Indstil enhedens rolle til Hub.
Systemet vil automatisk registrere den offentlige IP på WAN-porten og registrere den hos cloud Orchestrator.

Trin 3: Konfigurer Kant (Den anden enhed)

Indstil enhedens rolle til Kant.
Bekræft IP-segmenter: For at undgå forbindelseskonflikter skal du sikre, at LAN-IP-områderne for de to enheder ikke overlapper.
- Eksempel: Hvis Hub bruger 192.168.1.x, skal du indstille Kant til 192.168.2.x.

3. Automatisk forbindelse (Auto-Mesh)

Når opsætningen er fuldført, vil de to QHora-routere automatisk parre via Min organisation:

Kant-enheden vil proaktivt etablere en sikker forbindelse til Hub.
Du behøver ikke at konfigurere komplekse Port Forwarding eller Firewall-regler; QuWAN håndterer den krypterede tunnel automatisk.

Hurtig tjekliste

Samme konto: Er begge enheder logget ind med samme QNAP ID?
Standardorganisation: Har begge enheder tilsluttet "Min organisation"?
Korrekte roller: Er enheden med den offentlige IP indstillet som Hub?
Unikke segmenter: Er LAN-IP-områderne forskellige på begge lokationer?

Når du er færdig, vil du se en grøn linje, der forbinder de to QHora-routere på QuWAN Orchestrator Instrumentbræt, hvilket indikerer, at Site-to-Site VPN er blevet etableret med succes.

Was this article helpful?

Yes. No.

100% of people think it helps.

For yderligere hjælp kan du spørge andre brugere og QNAP-eksperter i vores community. Gå til QNAP Community

Please tell us how this article can be improved:

The article is missing important information
The article's solutions do not work
The article is too complicated
The article contains incorrect information
The article is out-of-date

If you want to provide additional feedback, please include it below.