Knowledge Center

SRM Settings

At Control Panel > System > SRM Settings > General, you can manage how users should access your Synology Router via encrypted or unencrypted connections over the Internet.

Contents

  1. Change the default HTTP/HTTPS port number
  2. Enable HSTS
  3. Try other SRM-related settings

1. Change the default HTTP/HTTPS port number

Your Synology Router enforces both HTTP and HTTPS connection for access. The enforced HTTPS (HTTP Secure) connection provides secure HTTP connection over the Internet, and you can circumvent malicious attacks or prevent information leakage when accessing SRM via a web browser.

By default, the HTTP/HTTPS ports are 8000/8001 respectively, and you can re-specify the HTTP/HTTPS ports to suit your needs.

  1. Enter the desired port number in the HTTP or HTTPS field.
  2. If you would like to redirect clients to the HTTPS port (e.g., 8001) upon their access to SRM through the HTTP port (e.g., 8000), tick Automatically redirect HTTP connections to HTTPS.
  3. Click Apply.

Note:

  • SRM: The default HTTPS port number is 8001, so you can securely access SRM by entering the following address: https://router-hostname:8001/
  • You may need to import the certificate from Synology Router to your local client computer for the HTTPS connection. For more information, please see this article.

2. Enable HSTS

To enhance HTTPS security with HSTS:

HSTS (HTTP Strict Transport Security) can further enhance security of HTTPS connection, by forcing all client connections with your Synology Router over HTTPS.

  1. Tick Enable HSTS.
  2. Click Apply.

3. Try other SRM-related settings

To find Synology Router via Windows network discovery:

Enabling this option allows Windows network discovery to find your Synology Router over the Internet, and offers users another shortcut to access it.

  1. Tick Enable Windows network discovery.
  2. Click Apply.

To restrict external access to SRM:

You may allow your Synology Router to accept external access to SRM only and only via HTTP/HTTPS ports (e.g. 8000/8001).

  1. Tick Allow external access to SRM.
  2. Click Apply.

Note:

  • For security reasons, if you enable this option and disable it later, your Synology Router will block all external access.

To rename your Synology Router:

  1. Enter your desired name in the Server Name field.
    • Your router name is case insensitive and can be in the range of 1 to 15 characters, consisting of letters, numbers, underscores and minus (-) signs. The first character of the name must be a letter.
  2. Click Apply.
1. Change the default HTTP/HTTPS port number
2. Enable HSTS
3. Try other SRM-related settings