Port Forwarding for Synology NAS (out of my depth)

[#1]

I have a Syniology NAS for which I'm trying to set up a security certificate and https access.
Having been through the proscribed setting in the NAS, to test the changes, the recommendation is to enter the NAS's domain name into a browser window.
When I do this, I get redirected to my PN Hub Two's dashboard.

Synology tech support reccomends the following:

Verify that port forwarding is set up correctly on your router. You will need to forward ports 80 and 443 to your NAS's local IP address to enable access via HTTPS.

In the router's settings, I've found Advanced settings > Firewall > Port forwarding and the option to Create a new port forwarding rule.

• I assume the Rule name is arbitrary.
• I can select my NAS as the respective device.
• I have no idea what the external ports, internal ports or protocol should be set to.

Under Advanced settings > Access Control > Schedules, I've also spotted that the NAS appears to be blocked between 7:45pm and 10am.
This is listed twice, and I've not created these schedules, so I don't know how they've been set.

Port forwarding settings are also available via Advanced settings > My network > My devices > [my_nas_name] > Port forwarding > Change settings, as are Access control settings, though the latter says "No access times bave been set for this device".

Any Advice would be very welcome as, unfortunately PN Tech Support are unable to offer any ... err ... well ... y'know ... technical support. 😠

[#2]

@idris  Welcome to the forum. You may find useful info here : https://mariushosting.com/ 

Can you try NAS's ‘domain name’:443 in a browser. 

[#3]

Unfortunately the only relevant articlesI can find on that site refer to TP-Link routers and the respective settings options don't match those for the PN Hub Two.
Hub Two has fields for Start and End for both external and internal ports. (Presumably TCP/UDP is equivalent to All under the protocol dropdown.)

Entering the NAS's ‘domain name’:443 in a browser returned "The connection was reset".

[#4]

Hub 2 port settings should be external start and finish i443, same for internal.

I don’t have a Hub 2 so can someome confirm these settings and if accessing external port from inside works ?

What are you trying to achieve, remote access to DSM or running a website ?

[#5]

Remote access.

[#6]

For simplicity have a look at QuickConnect here : Synology quickConnect 

---

[#7]

So you're setting up a VPN server?

Which VPN are you using, OpenVPN or something else?

Are you using the default port, if not what?

[#8]

QuickConect works, but having got part way down the rabbithole of setting up a lets Encrypt certificate, I can't now access the NAS via the Drive app on my Android phone.
(To be honest, I can't actually remember why I started this process now, but it made sense at the time.)

[#9]

I'm not planning a VPN server at the moment.
File sharing, syncing and a media server (music only).
But that's kind of not relevant as Synology Tech Support say I need to address port forwarding.

[#10]

Which ports do you need opened, TCP, UDP or both.

I will create an example rule for you

[#11]

I honestly don't know.

[#12]

It might be worth having a look around the Synology forum