This question is very similar but also distinctly different (How do I ensure data encryption on Samba transmission on *NIX systems?)
I'm looking to set up remote access to a NAS unit locally sharing via samba. I'd like to set up access on a remote PC (all windows) that would see the NAS unit as a mapped network drive.
From what I understand I have two options (I'm open to more this is just all I am aware of at the moment):
- Set up a dynamic IP hostname, forward the necessary ports, and map the net work drive on the remote system. (how much of this is encrypted/secure?)
- Set up a VPN server and have the user connect to my network to have access to the mapped network drive. (should encrypt everything)
Option 2 would be the obvious choice however I don't want all of the network traffic on the remote PC to also go through the VPN. I want only the mapped network drive interactions to go through the VPN. Is this possible? Is another approach better for achieving this?
In addition I don't want the remote PC to have to manually connect/disconnect to gain access, and furthermore, they may have an existing VPN they are already routing through. Am I asking for too much?
If it matters, the NAS I have in mind is Synology.