ciphermethod.com

Synology VPN Server

Forward ports 500, 1701, 4500 to server

VPN Server: Enable L2TP/IPSec, confirm Authentication is MS-CHAP v2, and set pre-shared key, enable user permissions for L2TP

IPad/IPhone VPN Client: L2TP w/ secret

Windows VPN Client: L2TP/IPSec with pre-shared key

Windows VPN Adapter Options:

Set VPN adapter Security Tab to Layer 2 Tunneling Protocol with IPSec (L2TP/IPSec)

Set Requires encryption (disconnect if server declines)

Set “Allow these protocols” and enable Microsoft CHAP Version 2 (MS-CHAP v2)