Synology Router User's Guide







Note:
SRM allows you to customize the desktop with default wallpapers or with your own images. You can also customize other desktop elements (e.g. text color and icon size).
Click Options (the person icon) on the top-right corner, and go to Options > Desktop:
If you forgot the administrator/Wi-Fi password or the Synology Router becomes unreachable, you can fix the situations by pressing the RESET button on the bottom shell.
This chapter introduces the three wireless operation modes available to your Synology Router to suit your networking needs. To find the operation modes, please go to Network Center > Operation Modes.
Under this mode, your Synology Router works as a regular router that transfers data between two networks (e.g. between a local network and the Internet) and finds the optimal path for data delivery. This mode also provides wireless connection to wireless devices for continuous access.
Wireless Router is recommended in the scenarios below:
Below are the suggested usages:
If you have an ISP modem:
If you do not have an ISP modem:
Under this mode (also known as the Bridge mode), your Synology Router bridges all network interfaces (LAN, wireless LAN, and WAN) and therefore has five LAN ports (LAN 1-4 and WAN) available to wired clients.
As a wireless AP, the router cannot assign IP addresses to the clients (the DHCP Server is disabled) and works only as a wireless transmission device, sending/receiving data via Wi-Fi between wireless and wired networks.
Wireless AP (Access Point) is recommended in the scenarios below:
Note: Under this mode, the Synology Router will not provide the following functions/settings under Network Center: Port Forwarding, Local Network, Traffic Control, and Parental Control.
Under this mode, your Synology Router works as a Wi-Fi Ethernet adapter and connects to the Wi-Fi signal from another router or access point for Internet access. Wireless Client is recommended in the scenario below:
Below is the suggested usage:
Note:
This chapter introduces how to create Wi-Fi networks hosted by your Synology Router. Two types of Wi-Fi networks can be created: 2.4GHz and 5GHz.
Smart Connect allows you to connect your devices to the combined SSID with the shared Wi-Fi settings for both 2.4GHz and 5GHz bands. SRM will determine whether to switch between the two frequency bands (i.e. 2.4GHz and 5GHz) according to your specified policy and network conditions to ensure the best wireless connectivity for your devices. Smart Connect does not switch between channels (e.g. 1 and 10) within each band for your devices.
You can create a 2.4GHz or 5GHz Wi-Fi network:
A guest Wi-Fi network allows visitors or non-regular users to securely access the Internet without having access to the rest of your network devices. Guest networks can be isolated and set to be valid for only a certain amount of time.
To set up a guest Wi-Fi network, go to Network Center > Wireless > Guest Network for the setup.
WPS (Wi-Fi Protected Setup) is a standard promoted by the Wi-Fi Alliance to simplify Wi-Fi security settings for users. Though the setup is quick, the WPS network may not be secure. To keep the WPS network safe, you can use a push button or a PIN code.
Three ways are available to quickly set up a Wi-Fi network via WPS:
By push button:
By AP PIN code:
By client PIN code:
Note: Client iOS devices cannot join a WPS network because iOS does not support WPS.
This chapter introduces various features for easy and safe access to the Internet.
At Network Center > Internet > Connection > Primary Interface, you can choose how to connect your Synology Router to the Internet:
You can enable the secondary interface to operate in the failover or load-balancing mode. Go to Network Center > Internet > Connection > Secondary Interface (LAN 1) to enable this interface.
ISP Settings
This function allows you to send the MAC address of your Synology Router to the ISP for successful registration. To do so, go to Network Center > Internet > Connection > Primary Interface > ISP settings.
VPN Settings
A VPN (Virtual Private Network) helps secure data transfer between your device and a remote location.
To use your Synology Router as a VPN client, go to Network Center > Internet > Connection > Primary Interface > VPN settings to modify the settings.
Note: Synology Router can only connect to OpenVPN servers which support tun-style tunnels on Layer 3.
IPv6 Settings
To set up IPv6 on your Synology Router, please go to Network Center > Internet > Connection > Primary Interface > IPv6 setup.
At Network Center > Internet > Smart WAN, you can configure two defined outward-facing internet interfaces (e.g. PPPoE and WAN). You can choose either mode to determine their roles in network connectivity:
Smart WAN also allows you to regulate network traffic by setting up policy routes for specific devices. Such devices will be able to access the Internet and receive Internet traffic only through the defined interface.
At Network Center > Internet > QuickConnect & DDNS, you can enable the services below for easy connection to your Synology Router.
QuickConnect
QuickConnect is a connection technology developed by Synology that helps you effortlessly access your Synology Router from anywhere with your personal QuickConnect ID.
Enter the URL as shown below in a web browser to access your Synology Router via QuickConnect:
For more information about QuickConnect, refer to the white paper.
DDNS
DDNS (Dynamic Domain Name Service) matches the hostname and the IP address of your Synology Router for quick access even if you do not have a static IP address from your ISP. If you do not have a hostname, register one from Synology or other DDNS providers.To find your Synology Router with its DDNS hostname (e.g. john. synology.me), please enter the registered hostname in the web browser.
A DMZ (as a “demilitarized zone”) is part of the network directly exposed to the Internet or other external untrusted networks. All external access will be directed to the host device in the DMZ. The DMZ host can directly connect to the Internet and is free from firewall limitations and protection. It is useful to set up servers as the DMZ host.
To enable DMZ, go to Network Center > Port Forwarding > DMZ for the setup.
Note: To connect to a host in the DMZ from an external network, you need the host’s external IP address retrieved by your Synology Router.
Port forwarding redirects data flow between different ports and has the following advantages:
To set up port forwarding rules, go to Network Center > Port Forwarding > Port Forwarding.
Port triggering requires you to set up one static port (the outgoing/trigger port) and one dynamic port (the incoming port) for a service/device in the local network for data transmission. Once the data come out to an external host through the trigger port, the incoming port is then triggered and opened to receive data from the host. If no data come out, the incoming port turns off, shutting down a possible opening for malicious attacks.
To set up port triggering rules, go to Network Center > Port Forwarding > Port Triggering.
IPv4 and IPv6 are two protocols not mutually compatible. To help IPv6 devices communicate with each other over an IPv4 network, via IPv6 tunneling you can wrap up IPv6 data within IPv4 packets, so that IPv6 data can travel through an IPv4 network.
To enable IPv6 tunneling, go to Network Center > Internet > IPv6 Tunneling.
Note: Your external IPv6 address may be automatically updated by the service provider. However, your Synology Router will not remove the old IPv6 address immediately
The chapter introduces various features to efficiently manage the local network.
By default, your Synology Router works as an IPv4 router assigning IPv4 addresses to client devices. It can also become a mixed IPv4/IPv6 router to assign IPv6 addresses.
To set up your Synology Router as an IPv6 router, go to Network Center > Local Network > IPv6.
Note: Only IPv6-supported devices can receive IPv6 addresses assigned by your Synology Router.
As a DHCP (Dynamic Host Configuration Protocol) server, your Synology Router can assign dynamic IP addresses to DHCP clients (i.e. network devices) within your local network.
To find a list of DHCP clients and their network configurations (e.g. MAC and IP addresses), go to Network Center > Local Network > DHCP Clients.
To reserve the assigned IP addresses for the clients, go to Network Center > Local Network > DHCP Reservation.
Note: Your Synology Router can assign both IPv4 and IPv6 IP addresses. To assign IPv6 IP addresses to DHCP clients, please enable the IPv6 function at Network Center > Internet > Connection > Primary Interface > IPv6 setup first.
A static route is a routing path manually configured to pass data to and from a specific destination service/device. The static route does not automatically change with the network configuration, and its routing information is not exchanged between other routers.
Setting up static routes can benefit you in the following scenarios:
To set up static routes, go to Network Center > Local Network > Static Route.
Note:
The IPTV & VoIP services allow you to connect an STB (set-top box) or VoIP phone to your Synology Router for multimedia services from the ISP or for phone communication. Before using the services, you need to have the VLAN ID provided by the ISP for the setup.
To set up the IPTV & VoIP services, go to Network Center > Local Network > IPTV & VoIP.
Install & Manage USB/SD Storage
With a connected USB/SD storage device, you can install add-on packages that allow you to easily share and stream files on your network.
At Control Panel > Storage > Storage, you can find out the total available external storage (e.g. USB drives & SD cards) on your Synology Router. There you can also format and manage the device to suit your needs.
Note:
After external storage is established on your Synology Router, you can create shared folders for public use (e.g. “public”) and home folders for individual users.
To create shared folders, go to Control Panel > Storage > Shared Folder. There you can also set users’ access privileges to the folder.
To create users, go to Control Panel > User > User. There you can also set the user’s access privilege to shared folders.
Your Synology Router can become a printer server, allowing you to connect a non-networked printer to be shared with other devices. You can also set up Google Cloud Print to print out needed documents from everywhere.
To install a network printer, please attach it to the USB slot.
To manage a network printer connected to your Synology Router, go to Control Panel > Device > Printer.
Note: Please refer to the compatibility list for supported network printers.
With a 3G/4G dongle, your Synology Router can still provide Internet access to client devices via a cellular network.
To install a 3G/4G dongle to your Synology Router, please attach it to the USB slot.
To manage the dongle settings, go to Network Center > Internet > 3G & 4G.
Note: Please refer to the compatibility list for supported 3G/4G dongles.
This chapter introduces the features on your Synology Router to diagnose system and connection problems.
For an overview of wired and wireless connections to the Synology Router, go to Network Center > Status. There you can also view the real-time network status and system resource usage.
For a detailed traffic log of devices and applications, please go to Network Center > Traffic Control > Monitor.
The Synology Router sends instant notifications on system/connection errors via various media (e.g. SRM desktop, SMS, and email).
To customize notifications, go to Control Panel > Notification.
Ping is a utility used to quickly verify connectivity. Ping works by sending out a request packet to a target website or IP address and calculating the time lapse for receiving a response packet from the target.
Delayed or unresponsive targets may be due to the following:
If the problem is external to your Synology Router, you should consult your ISP or other relevant service providers for assistance. To diagnose connection problems with Ping, please go to Network Tools > Ping.
Traceroute
Traceroute is a utility used to examine the Internet pathway taken to reach a specific destination. The physical route will be displayed on a Google Map, along with the time lapse spent between two adjacent route points.
With Traceroute, you can better understand how your traffic is being routed.
To diagnose connection problems with Traceroute, please go to Network Tools > Traceroute.
Contact Technical Support
Go to Support Center or Synology's official website to contact Synology Technical Support.
Why can't I log in to SRM?
What can I do if I forgot my SRM password?
Why can't I update SRM successfully?
What is the difference between Soft Reset and Hard Reset?
Please see "Reset Synology Router".
How can I eject the USB/SD storage from my router?
To safely eject the external storage, please see "Install & Manage USB/SD Storage".
How can I get the best Wi-Fi experience with my RT1900ac?
We recommend placing your router upright with the stand kit included for optimal wireless results and better ventilation.
Its EJECT button will be hidden with the front panel facing down. In this situation, you can go to Control Panel > Storage > Storage, and click Eject to perform this operation.
Why can’t I access the Internet?
Why can’t I connect to certain sites or send/receive emails when connecting through my router?
If your device has been added to Parental Control, check its level of protection and if the websites in question have been added to the Custom web-filter.
Why is the upload/download traffic slow?
What can I do if port-forwarding doesn't work properly?
Why can't I find my router via router.synology.com?
Why do I have abnormal incoming/outgoing traffic?
Does the router have SPI firewall?
Yes. SPI firewall is always enabled. No related management options are provided.
Can the VPN Server package work on my router if I use IPv6 connection?
If the router provides IPv6 connection, you can only use VPN Server as an OpenVPN server. The other types of VPN (PPTP and L2TP/IPSec) are not supported.
What can I do if I can't connect to the router via VPN connection?
Make sure you enable the VPN pass-through function and select the corresponding options of the VPN protocols (PPTP, L2TP, IPSec) that you use.
Why does a message pop up notifying me I do not have a valid certificate when I visit certain HTTPS websites?
When you visit an HTTPS website, the website will continuously send a request to SRM for a valid certificate. If the website or some of its elements is in the block list, SRM cannot respond to the request with a valid certificate.
To work around this issue (due to the HSTS concerns), you can add the website to the allow list (at Network Center > Parental Control > Web-filter > Edit Allow List).
What can I do if I forgot the Wi-Fi SSID and its password?
Why did my Wi-Fi SSID disappear?
Why can't my device connect to the Synology Router wirelessly?
Why can't my wireless devices communicate with each other though they are in the same Wi-Fi network?
AP isolation may have been enabled (at Network Center > Wireless > Wi-Fi > Advanced options). AP isolation prevents wireless client devices that join the same Wi-Fi network (2.4GHz or 5GHz) from communicating with each other.
If the network is a guest network, wireless devices cannot see each other if they are located on different bands. You may enable this functionality at Network Center > Wireless > Guest Network by enabling Allow local network access for the guest network.
Why is the Wi-Fi signal weak and how can I improve it?
Weak Wi-Fi signal may come from the following reasons:
To improve Wi-Fi signal strength, you may try the following solutions:
Why can't I boost a device's signal with beamforming?
Which Wi-Fi frequency (2.4GHz and 5GHz) should I choose?
Please see "Set up Your Wi-Fi Connection".
Why can't I find the router's 5GHz Wi-Fi network?
Due to previous NCC (National Communications Commission) regulations, in Taiwan wireless devices manufactured before 2009 cannot make use of the 5GHz Wi-Fi channels 36-48. To help such wireless devices connect to the 5GHz Wi-Fi network, you should use alternative channels rather than channels 36-48 (at Network Center > Wireless > Wi-Fi > 5GHz > Advanced options).