this my network map:
What I want to do is see ip camera with dyn dns outside Lan network.
But now when I go to mydomain.dyndns… I get modem webpage instead of ip camera interface. 8090 is the port I used.
Maybe I’m missing some step.
Exactly what are you typing into the browser and and where is the browser client in the network?
What is your NAT config?
browser client is outside the network, into another DSL connection.
this my NAT config:
followed this: http://networkingforintegrators.com/2013/02/hairpin-nat-or-how-to-use-your-dyndns-address-internally-or-externally/
To dstnat port 80 into my router, I had to disable the www service or my router’s login page would appear.
/ip service
disable www
You need to dstnat your public ip to the camera ip (192.168.88.180). Then you will need to route that ip subnet through the Router and AP2 to your camera. Have you done that?
Does the CPE equipment (192.168.20.x) connected to the switch and camera connect to the wireless on AP2? What is its ip address?
Cpe obtain ip address automatically via DHCP by AP2.
So its ip is something like 192.168.40.150.
How to route?
You have a routing problem.
First, you have two networks assigned 192.168.1.x/24. One on Router, and one on AP3 and AP4. You can’t route that. I presume that network has a NAT, and you can’t route through that NAT. You need unique subnets to route through all that.
Second, you can’t reliably route to a dhcp assigned ip unless you set that dhcp lease to static.
Third, if the cpe connected to the camera is 192.168.40.x, then it must be connected to AP4. Is that true? If that is the case, you must route 192.168.88.0/24 from
Router → AP2 → AP3 → AP4 → CPE → camera.
Whew! Not difficult for me, but a little confusing for someone not familiar with routing.
this is cpe (sxt lite5) routing config:
[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 S 0.0.0.0/0 192.168.20.1 1
1 S 0.0.0.0/0 192.168.30.1 1
2 A S 0.0.0.0/0 192.168.10.1 1
3 S 0.0.0.0/0 192.168.40.1 1
4 DS 0.0.0.0/0 192.168.10.1 1
5 S 0.0.0.0/0 192.168.88.180 1
6 ADC 192.168.10.0/24 192.168.10.187 wlan1-gateway 0
7 ADC 192.168.88.0/24 192.168.88.1 ether1-local 0
this from AP that gives internet access:
XM.v5.5.8# ip route show
192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.15
192.168.10.0/24 dev ath0 proto kernel scope link src 192.168.10.1
169.254.0.0/16 dev eth0 proto kernel scope link src 169.254.84.247
default via 192.168.0.1 dev eth0
and this from main router:
[admin@RB750GL] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 192.168.1.1 2
1 A S 0.0.0.0/0 192.168.5.1 1
2 A S 0.0.0.0/0 208.67.222.222 1
3 S 0.0.0.0/0 8.8.8.8 1
4 A S 0.0.0.0/0 208.67.220.220 2
5 S 0.0.0.0/0 8.8.4.4 2
6 A S 0.0.0.0/0 8.8.8.8 1
7 S 0.0.0.0/0 8.8.4.4 2
8 A S 8.8.4.4/32 208.67.220.220 1
9 A S 8.8.8.8/32 208.67.222.222 1
10 ADC 192.168.0.0/24 192.168.0.1 ether2-master-l... 0
11 ADC 192.168.1.0/24 192.168.1.2 ether2-master-l... 0
12 ADC 192.168.5.0/24 192.168.5.2 ether1-gateway 0
13 A S 192.168.10.0/24 192.168.0.15 1
14 A S 192.168.20.0/24 192.168.0.20 1
15 A S 192.168.30.0/24 192.168.0.25 1
16 A S 192.168.40.0/24 192.168.0.30 1
17 ADC 192.168.88.0/24 192.168.88.1 ether2-master-l... 0
18 A S ;;; Static Route WAN2
-- [Q quit|D dump|down]
how to set?
cpe= dst-address 0.0.0.0 gateway=192.168.88.180 (ip camera) port=8090 protocol=tcp
ap2= dst-address 0.0.0.0 gateway=192.168.10.187 (cpe wan ip) port=8090 protocol=tcp
main router= dst-adress 0.0.0.0 gateway=192.168.0.15 (ap lan ip) port=8090 protocol=tcp
is it correct?
The main router shows it has a 192.168.88.1/24 interface.
17 ADC 192.168.88.0/24 192.168.88.1 ether2-master-l… 0
Maybe you should delete that ip address from that interface.
Did you notice the rest of the routes on the main router are over a 192.168.0.x network?
13 A S 192.168.10.0/24 192.168.0.15 1
14 A S 192.168.20.0/24 192.168.0.20 1
15 A S 192.168.30.0/24 192.168.0.25 1
16 A S 192.168.40.0/24 192.168.0.30 1
I don’t know what to tell you.
yeah, sure that I noticed that!
those are the 4 AP lan ip addresses!
You can’t remove the route. You must remove the ip address in “/ip address”.
So what you are saying is in your image above, replace the 192.168.1.x net with 192.168.0.x?
Which AP in the image is the CPE connected to?
192.168.0.x is core network (cable lan). each ap has 192.168.0.x ip for LAN.
E.g
in this case cpe is connected to AP1 192.168.0.15 (lan), 192.168.10.1 (wlan)
OK, if you removed 192.168.88.1/24 ip address from the main router, then the first route you must enter in the main router should be this:
/ip route
add dst-address=192.168.88.0/24 gateway=192.168.0.15
What is the WLAN ip of the CPE? It should be 192.168.10.?
you said it correct, cpe has 192.168.10.187 ip address.
OK, then enter this route in AP1. I don’t know if AP1 is a Mikrotik router, but I will give you the route as if it is.
/ip route
add dst-address=192.168.88.0/24 gateway=192.168.10.187
At this point, you should be able to ping 192.168.88.1 in the CPE from the main router.
edit: Insure there are no nats in AP1 or the CPE.
hmm, it doesn’t work yet.
I got dhcp issue too?
You can’t ping 192.168.88.1 from the main router?
Can you ping 192.168.10.1 from the main router?
Can you ping 192.168.10.187 from the main router?
Ouch I can’t ping 192.168.88.1 from main router!
Then troubleshoot it. I told you how. From the main router:
/ping 192.168.1.15
If that works, then
/ping 192.168.10.1
If that works, then
/ping 192.168.10.187
If that works, then
/ping 192.168.88.1
Where does the ping fail?
now ping works.
but I can’t access camera interface yet. omg!
Can you ping the camera from the main router?
/ping 192.168.88.180
Can you access the camera images from a computer connected to the main router?