i need to view my DVR remotely. The thing is that
Now i want to view my cameras remotely. I did everything but i could not open the ports. So if you guys could kindly help me with this.
Well, a drawing of the network will help. You also ned to know the ports that the cctv system neds to work. If it uses only a tcp port you don’t have to worry about answering connections from the same gateway, mikrotik will do it 4 u, but if the cctv uses rtp conections associated to de control connection you have to chose for it the wateway using mangle chains to put routing marks to chose the corrrect gateway. When routing, the answer is allways the problem.
To do a simple ip napt the only thing that you have to do is a destination nat rule in the outside interface pointing the cctv, and accept this connection wth a forward rule.
I hope this help.
Well my DVR uses following ports
http port: 2222
media port: 6001
Intercom port:6002
Mobile Port: 6003.
DVR address:192.168.10.222
Public IP (WAN1): 10.10.10.10 lets say
WAN2 is dynamic ip
what i have done is:
/ip firewall nat
add chain=dstnat action=dst-nat protocol=tcp dst-address=10.10.10.10 dst-port=2222 to-addresses=192.168.10.222 to-ports=2222
add chain=dstnat action=dst-nat protocol=tcp dst-address=10.10.10.10 dst-port=6001 to-addresses=192.168.10.222 to-ports=6001
add chain=dstnat action=dst-nat protocol=tcp dst-address=10.10.10.10 dst-port=6002 to-addresses=192.168.10.222 to-ports=6002
add chain=dstnat action=dst-nat protocol=tcp dst-address=10.10.10.10 dst-port=6003 to-addresses=192.168.10.222 to-ports=6003
/ip firewall filter
add chain=forward action=accept protocol=tcp dst-address=192.168.10.222 dst-port=2222
add chain=forward action=accept protocol=tcp dst-address=192.168.10.222 dst-port=6001
add chain=forward action=accept protocol=tcp dst-address=192.168.10.222 dst-port=6002
add chain=forward action=accept protocol=tcp dst-address=192.168.10.222 dst-port=6003
/ip firewall mangle
add chain=prerouting in-interface=ISP1 connection mark=no-mark action=mark-connection \ new connection mark=DVR
That’s all i did.
So can’t i route the traffic of dvr from WAN1(public ip) only so that i can be able to view me dvr rometly?
Thanks for your help
I think that ipnapt rules are correct … but
What about the /ip route export?
And the outgoing nat and masquerade rules for outgoing traffic on both interfaces?
Does it works when turning off dinamic IP interface?