0

Note: I checked the answers under Accessing IP cameras from outside network but I could not understand. Forgive me for being this dumb :S. I thought using port forwarding or vpn to home network should solve this issue but it didnt.

I have IP Camera Kaposev (Hidden Wireless charger camera) that is accessible from the iOS app HDWifiCamPro when both the camera and my cellphone are connected to my wifi at home. It works OK. However, when I am trying to connect to the camera using the same app remotely (using the 4G network on my cellphone), the app fails to connect. Can you please tell me what I should do to connect to the camera from outside of my wifi?

What have I done so far?

  • Using wireshark and my iphone connected to my Macbook (with RVI enabled and xcode installed), I was able to monitor the traffic between the Iphone and the camera. I see that the communication is going over UDP between ip_addr_camera:28888 and ip_addr_phone:20988

  • The camera's username is: SOME_USERMAME and the password is: SOME_PASSWORD

  • My public IP of wifi (gateway) is 218.201.55.211

  • I created port forwarding in my router as following

  • Port forwarding 1: Name: Testcam Protocol:UDP WAN_port:20988 LAN_port:28888 Destination_IP:ip_addr_camera Destination_MAC:MAC_CAM

  • Port forwarding 2: Name: Testcam2 Protocol:UDP WAN_port:28888 LAN_port:20988 Destination_IP:ip_addr_camera Destination_MAC:MAC_CAM

  • I have enabled the VPN service in my router setting and created a VPN on my cellphone. Hence, when I connect to the VPN on my cellphone, I get the public IP address of 218.201.55.211 and I get a LAN IP for my device as well.

After these steps, I am lost. I am new to the whole networking thing, I will really appreciate it if you can guide me on what more should I do to be able to view this camera remotely. Is there any easy way to access the stream remotely? I do not know if my camera is ONVIF compatible or not

I am unable to access the camera from (With or WITHOUT vpn) udp://ip_addr_camera:28888 or 20988

Update: Turns out that I am unable to ping my other devices on LAN when connected with VPN. Following is the configuration that I am using

VPN Server settings with in router (Technicolor wifi router plus v3 )

  • Local IP: 192.168.1.245
  • Remote IP Start: 192.168.1.246
  • Remote IP End: 192.168.1.253

DHCP Settings

  • Local Device: 192.168.1.1
  • Network address: 192.168.1.0
  • DHCP Start address: 192.168.1.64
  • DHCP End address: 192.168.1.243

Static IPs Settings

  • Camera: 192.168.1.244
  • MAC book: 192.168.1.49
  • Iphone: 192.168.1.246

VPN Client settings

  • Server address: My public ip of home network
  • Type: L2TP over IPSec
  • Username: MY_VPN_USER
  • Password: MY_VPN_PASS
  • Shared Secret: SOME_SECRET
  • Send all traffic: True
  • DNS Servers: As provided by device for WAN (2.248.248.2, 2.248.248.248)

Update 2: I can ping the devices now from the inside the wifi lan connected laptop to external vpn connect iphone. I can also ping the lan connected camera ip address from my vpn connected external device. BUT i am unable to connect to the camera though its app HDWIFICam pro still :(

Shahan
  • 1

2 Answers2

1

Forward Public to Private

Your goal is to redirect (forward, remap, etc.) incoming requests for [public_IP]:XXXX to [private_IP]:XXXX (XXXX to XXXX).

You are changing the port!

What you are describing in both your forwarding examples is taking incoming requests for [public_IP]:XXXX and forwarding them to [private_IP]:YYYY (XXXX to YYYY).

The mobile application is sending to port XXXX the same port on which the camera is listening. Unfortunately the router is redirecting the traffic to an unused port YYYY so the requests time out.

Just remap the destination IP

So, if you remap only the destination IP and keep the same port the packets will arrive at their intended destination.

Blindspots
  • 3,472
0

if your ISP is using CGNAT you won't be able to use your pseudo 'public' v4 address to access any internal device

background: Is it possible to access a machine behind a CGNAT (by somehow publishing the IP and port to a DDNS service)?

marcelo sauaf
  • 1