Search

How to Build a VPN Tunnel Connection Between QuWAN QBelt VPN Server and QVPN Device Client

最后修订日期: 2025-12-11

How to Build a VPN Tunnel Connection Between QuWAN QBelt VPN Server and QVPN Device Client

This tutorial explains how to configure a VPN tunnel connection between the QuWAN QBelt VPN server in QuWAN Orchestrator and QVPN Device Client.

QuWAN Orchestrator VPN Server Settings

To connect a VPN client to the QuWAN QBelt VPN server, you must first configure a QuWAN hub as a VPN server and add the VPN user in QuWAN Orchestrator.

Configuring QuWAN QBelt VPN Server Settings

QBelt is a QNAP proprietary communications protocol incorporating DTLS and AES-256 encryption. QuWAN Orchestrator enables users to configure their QuWAN hub devices as QBelt VPN servers.

Important:

You can configure the QuWAN QBelt VPN server settings only on QNAP NAS, QGD switches, QuCPE, and third-party hypervisors configured with QuWAN vRouter Edition.

  1. Open QuWAN Orchestrator.
  2. Go to VPN Server Settings > QuWAN QBelt VPN Server.
  3. Identify a hub.
  4. Click .
    Note:

    Hubs listed on the QuWAN QBelt VPN Server page are automatically configured with the default VPN server settings. You can edit the settings based on your VPN requirements.

    The VPN server configuration window appears.

  5. Configure the QuWAN QBelt VPN server settings.
     

    Setting

    User Action

    VPN User IP Range

    Assign a fixed IP address range to the VPN users.

    Subnet mask

    Specify the subnet mask used to subdivide your IP address.

    UDP service port

    Click Service Management to assign a port number for the UDP service port.

    Tip:

    Click  to refresh the UDP service port number.

    Maximum number of VPN users

    Specify the maximum number of VPN users that can connect to the VPN server.

    Note:

    The maximum allowed number of VPN users changes depending on the specified subnet mask.

    DNS servers

    Specify the IP address of the DNS servers.

    Tip:

    • You can specify up to three DNS servers.

    • Separate entries with a comma (,).

  6. Click Save.

QuWAN Orchestrator saves the VPN server settings.

Tip:

Click  to enable the VPN server.

Adding a VPN User

  1. Open QuWAN Orchestrator.
  2. Go to VPN Server Settings > Privilege Settings.
  3. Click Add VPN User.

    The Add VPN User window appears.

  4. Configure the VPN user settings.
     

    Setting

    User Action

    Username

    Specify the name of the VPN user.

    Tip:

    Username requirements:

    • Length: 1–32 characters

    • Valid characters: A–Z,  a–z, 0–9

    Email Address

    Specify the email address of the VPN user.

    Accessible Hubs

    Select any available QuWAN hub that is configured as a VPN server.

    Tip:

    • You can select more than one VPN server.

    • The VPN user can only connect to the selected hubs.

    Segment

    Select a preconfigured segment belonging to the VPN user to apply segmentation firewall rules.

    Tip:

    You can share one segment among multiple VPN users.

    Multi-device Accessibility

    Select to allow the VPN user account to connect from multiple devices at the same time.

    Tip:

    • To add multiple VPN users, click Add VPN User.

    • To delete the newly added VPN user, click .

  5. Click Create.

QuWAN Orchestrator adds the VPN user.

After you add the VPN user in QuWAN Orchestrator, the email recipient receives an email containing the organization ID, username, and password. Ensure that the recipient enters this information in QVPN Device Client while configuring the QuWAN QBelt VPN settings.

Deleting a VPN User

  1. Open QuWAN Orchestrator.
  2. Go to VPN Server Settings > Privilege Settings.
  3. Select a method for deleting the VPN users.

      1. Identify a VPN user.

      2. Click .

        A confirmation message appears.

      3. Click Delete.


      1. Identify a VPN user.

      2. Beside the VPN user username, click .

        Tip:

        You can select multiple VPN users.

      3. Click Delete VPN User.

        A confirmation message appears.

      4. Click Delete.

QuWAN Orchestrator deletes the VPN user and sends an email to the VPN user confirming the removal of VPN user privileges.

Sending a New Password to VPN Users

You can reset the VPN user password by sending emails to the assigned email address. You can use this process for multiple VPN users at once.

  1. Open QuWAN Orchestrator.
  2. Go to VPN Server Settings > Privilege Settings.
  3. Identify a VPN user.
  4. Beside the VPN user username, click .
    Tip:

    You can select multiple VPN users.

  5. Click Send New Password.

    A confirmation message appears.

  6. Click Send.

QuWAN Orchestrator sends the one-time password email to the selected VPN user.

Disconnecting Online VPN Users

To limit the number of online VPN users or deny access to suspicious VPN users, you can disconnect online VPN users who are connected to the QuWAN Orchestrator VPN servers.

  1. Open QuWAN Orchestrator.
  2. Go to VPN Server Settings > Online VPN Users.
  3. Identify an online VPN user.
  4. Beside the login date, click .
    Tip:

    You can select multiple VPN users.

  5. Click Disconnect.

    A confirmation message appears.

  6. Click Disconnect.

QuWAN Orchestrator disconnects the selected VPN users.

QVPN Service VPN Client Settings

Once you configure the QuWAN QBelt VPN server settings and add the VPN user in QuWAN Orchestrator, you must install QVPN Device Client on the VPN user device. For details, view the following:

About QVPN Device Client

The QVPN Device Client manages connections to VPN servers running on a QNAP device. Consolidating tools for monitoring VPN connection speeds, reviewing connection logs, and accessing services running on the device, the client is available on Windows, macOS, iOS, or Android devices.

Tip:

The QVPN Device Client only supports connections to QBelt servers running on the device.

See the following table for details on QVPN Device Client protocol compatibility.

 

Platform

Supported Protocols

Windows

  • L2TP

  • OpenVPN

  • PPTP

  • QBelt

  • QuWAN QBelt VPN Server

macOS

  • L2TP

  • QBelt

  • QuWAN QBelt VPN Server

  • Android

  • iOS

  • QBelt

  • QuWAN QBelt VPN Server

Configuring the QuWAN QBelt VPN Client Settings on Windows 10

Ensure that the VPN user receives the email from QuWAN Orchestrator containing the organization ID, username, and password that is required to configure the QVPN Device Client QuWAN QBelt VPN settings.

  1. Open QVPN Service.
  2. Select QuWAN VPN Server.

    The Connect to a QuWAN VPN Server window appears.

  3. Specify the 24-character organization ID.
  4. Specify the username and password.
  5. Click Next.

    A confirmation message appears.

  6. Click OK.

    The password page appears.

  7. Specify the current password.
  8. Specify a new password.
    Tip:

    Password requirements:

    • Length: 8–64 characters

    • Valid characters: A–Z,  a–z, 0–9

    • Not allowed: Any except for space ( )

  9. Confirm the password.
  10. Click Next.

    The profile settings page appears.

  11. Specify a VPN profile name.
  12. Select a method to connect to the hub (VPN server).

    • Automatically select: Select to allow the application to automatically select any available VPN server.

    • Manually select: Select to manually choose any available VPN server and its available WAN port.

  13. Optional:  Select Connect Immediately After Save.
  14. Click Save.

    QVPN Service saves the VPN profile.

  15. Go to the QuWAN QBelt VPN page.
  16. Identify the saved VPN profile.
  17. Click the connect icon.

QVPN Service establishes a VPN tunnel connection with the QuWAN VPN server in QuWAN Orchestrator.


Configuring the QuWAN QBelt VPN Client Settings on macOS 10.13

Before configuring VPN client settings, ensure the following.

  • The QuWAN hubs configured as VPN servers are enabled in the QuWAN QBelt VPN Server page in QuWAN Orchestrator.

  • VPN users are added in the Privilege Settings page in QuWAN Orchestrator.

  • VPN user receives the email from QuWAN Orchestrator containing the organization ID, username, and password that is required to configure the QVPN Device Client QuWAN QBelt VPN settings.

  1. Open QVPN Service.
  2. Select QuWAN VPN Server.
  3. Click Connect to a QuWAN VPN Server.

    The Connect to a QuWAN VPN Server window appears.

  4. Specify the 24-character organization ID.
  5. Specify the username and password.
  6. Click Login.

    A confirmation message appears.

  7. Click OK.

    The password page appears.

  8. Specify the current password.
  9. Specify a new password.
    Tip:

    Password requirements:

    • Length: 8–64 characters

    • Valid characters: A–Z,  a–z, 0–9

    • Not allowed: Any except for space ( )

  10. Confirm the password.
  11. Click Save.

    The profile settings page appears.

  12. Specify a VPN profile name.
  13. Select a method to connect to the hub (VPN server).

    • Automatically select: Select to allow the application to automatically select any available VPN server.

    • Manually select: Select to manually choose any available VPN server and its available WAN port.

  14. Optional: Select Connect Immediately After Save.
  15. Click Save.

    QVPN Service saves the VPN profile.

  16. Go to the QuWAN QBelt VPN page.
  17. Identify the saved VPN profile.
  18. Click the connect icon.

QVPN Service establishes a VPN tunnel connection with the QuWAN VPN server in QuWAN Orchestrator.

Configuring the QuWAN QBelt VPN Client Settings on Android 7.0

Before configuring VPN client settings, ensure the following.

  • The QuWAN hubs configured as VPN servers are enabled in the QuWAN QBelt VPN Server page in QuWAN Orchestrator.

  • VPN users are added in the Privilege Settings page in QuWAN Orchestrator.

  • VPN user receives the email from QuWAN Orchestrator containing the organization ID, username, and password that is required to configure the QVPN Device Client QuWAN QBelt VPN settings.

  1. Open QVPN Service.
  2. Select QuWAN VPN Server.

    The Join QuWAN VPN Server window appears.

  3. Specify the 24-character organization ID.
  4. Specify the username and password.
  5. Click Next.

    A confirmation message appears.

  6. Click OK.

    The password page appears.

  7. Specify the current password.
  8. Specify a new password.
    Tip:

    Password requirements:

    • Length: 8–64 characters

    • Valid characters: A–Z,  a–z, 0–9

    • Not allowed: Any except for space ( )

  9. Confirm the password.
  10. Click Next.

    The profile settings page appears.

  11. Specify a VPN profile name.
  12. Select a method to connect to the hub (VPN server).

    • Auto: Select to allow the application to automatically select any available VPN server.

    • Manually select: Select to manually choose any available VPN server and its available WAN interface.

  13. Optional:  Select Connect Immediately After Save.
  14. Click Save.

    QVPN Service saves the VPN profile.

  15. Go to the QuWAN QBelt VPN page.
  16. Identify the saved VPN profile.
  17. Click .
  18. Click Connect.

QVPN Service establishes a VPN tunnel connection with the QuWAN VPN server in QuWAN Orchestrator.


Configuring the QuWAN QBelt VPN Client Settings on iOS

Before configuring VPN client settings, ensure the following.

  • The QuWAN hubs configured as VPN servers are enabled in the QuWAN QBelt VPN Server page in QuWAN Orchestrator.

  • VPN users are added in the Privilege Settings page in QuWAN Orchestrator.

  • VPN user receives the email from QuWAN Orchestrator containing the organization ID, username, and password that is required to configure the QVPN Device Client QuWAN QBelt VPN settings.

  1. Open QVPN Service.
  2. Select QuWAN VPN Server.
  3. Click Join QuWAN QBelt VPN Server.

    The Join QuWAN VPN Server window appears.

  4. Specify the 24-character organization ID.
  5. Specify the username and password.
  6. Click Next.

    A confirmation message appears.

  7. Click OK.

    The password page appears.

  8. Specify the current password.
  9. Specify a new password.
    Tip:

    Password requirements:

    • Length: 8–64 characters

    • Valid characters: A–Z,  a–z, 0–9

    • Not allowed: Any except for space ( )

  10. Confirm the password.
  11. Click Next.

    The profile settings page appears.

  12. Specify a VPN profile name.
  13. Select a method to connect to the hub (VPN server).

    • Auto: Select to allow the application to automatically select any available VPN server.

    • Manually select: Select to manually choose any available VPN server and its available WAN port.

  14. Optional: Select Connect Immediately After Save.
  15. Click Save.

    QVPN Service saves the VPN profile.

  16. Go to the QuWAN QBelt VPN page.
  17. Identify the saved VPN profile.
  18. Click .
  19. Click Connect.

QVPN Service establishes a VPN tunnel connection with the QuWAN VPN server in QuWAN Orchestrator.


这篇文章有帮助吗？

是 否
谢谢您，我们已经收到您的意见。

请告诉我们如何改进这篇文章：

如果您想提供其他意见，请于下方输入。

选择规格

      显示更多 隐藏更多
      open menu
      back to top