Hello, I have a main modem that is defined as Gateway and I gave the Internet to the Mikrotik router and I use the Mikrotik router as the main device that users connect to. I want to close the access to the CCTV cameras so that no one outside the office and outside the internal network can access it, according to the explanations I read on various sites, I could not do this. I would appreciate it if you could guide me.
It depends on configuration.
The dafault router configuration denies access to any not allowed port so there is no chance to access CCTV.
If you access cameras via external proxy/server which they send the video stream to then your router is not involved at all so there is no chance to block access.
Thanks for answering my question. i use default config in 750gl with DHCP mode to main (Huawei) router gateway. not proxy/server. but i configured port mapping in my Huawei router and in this section not any change in 750gl router but can access to my CCTV with any IP, so now and want to limit this to created address list in firewall.
Are you trying to ask how to set up an IP whitelist in order to prevent arbitrary Internet hosts from using the port-mapping that you just created?
While that should be possible, a far better plan is to configure a VPN of some type on the router, which will then let VPN-connected Internet hosts connect to the cameras from inside the network.
To see why, try to construct that IP whitelist. Chances are, you will find that clients in the modern Internet keep moving about, so that instead of a handful of static IPs allowed to access the cameras, you will end up needing to allow access from a handful of ISP IP subnets covering thousands of potential client IPs even while only a few are actually “legal” at any one instant. A VPN gives much stronger protection than your IP camera’s login page and serves as a secondary security layer besides.
By the way, I recommend abandoning the term “CCTV” in favor of “IP camera.” The old term refers to the analog “closed-circuit television” cable loops that connected multiple cameras to a single head-end security system. Especially in the context of this question, nothing like that is occurring with an IP camera. They’re all home-run to an Ethernet switch, for one thing.