Trial of twingate business, can't get traffic flowing

Support / Troubleshooting
1

Trying to decide on good ZTNA solution for work. Doing a trial of TwinGate at home.
Trying to ping from Android client to Synology NAS…failing.
Here is what I have done so far:
Setup twingate account.
Install Connector using Docker on Synology NAS using instructions on Twingate website here.
Connector shows connected.
Install Android client on phone.
Verified android client using Twingate website.
Added Resource of LAN using CIDR of entire LAN private network. 192.168.86.0/24
Added Everyone to be able to access LAN Resource
No policies
Turned off Android built-in Google VPN.
Turned on Android Twingate VPN/client. (Android is on WiFi on separate network)
Ping from Android phone to NAS 192.168.86.254. Timeout.
On twingate website, it shows these details:
I requested 192.168.86.254
Protocol: ICMP • Client Device IP: 67.248.166.220
Relay patched connection
Relay Address: 34.86.114.217:30000
Connector (MyConnector) received request
Connector: mottled-donkey
Failed to connect to 192.168.86.254. MyConnector could not be reached

Not sure what else to do at this point.

2

Hi @JT2022 - can you try something other than ping to verify if it works? I’m suspecting that the required flags to support ping on the Twingate connector docker instance may not be present.

3

I can connect using https.
How do I enable ping?
How do I configure a backup connector? When I add a backup connector to the Synology NAS, the second one stops immediately.

4

Hi @JT2022 - to enable ping you need to enable a sysctl flag:

sudo sysctl -w net.ipv4.ping_group_range='0 2147483647'

For a backup connector, we would recommend installing it on a separate physical device so that it can take over if/when your other connector fails.

5

OK…but how to run that command against the connector in Docker on a Synology NAS?

6

Hi @JT2022 - on Synology you have to enable SSH access and then SSH in to execute this command.

If you’re not a regular shell user we would suggest taking extra care when using SSH and disabling SSH access once you’ve applied the change.