Community discussions

MUM Europe 2020
 
Serhioromano
just joined
Topic Author
Posts: 3
Joined: Tue Nov 26, 2019 1:50 pm

Port 8000 forwarding for HIKVISION camera not working

Tue Nov 26, 2019 3:19 pm

I've read this forum and there are some topics. But those do not answer my question.

First I created a NAT rule to open camera WEB access. It is configured on port 80 inside a camera. So I access it through port 8080 and it works fine.
chain=dstnat action=dst-nat to-addresses=192.168.1.222 to-ports=80 protocol=tcp dst-address=100.100.100.100 dst-port=8080

Now Webcam server on port 8000. I create absolutely the same rule, but when I use iVMS4500 mobile app it do not want to connect.
chain=dstnat action=dst-nat to-addresses=192.168.1.222 to-ports=8000 protocol=tcp dst-address=100.100.100.100 dst-port=8000

I thought maybe I've entered something wrong, but when I change IP/Domain to local address it works fine. When I switch to public address it says error to connect. I have no idea what did I do wrong here. Maybe protocol has to be not TCP but some other one?

CRS1
 
ivicask
Member Candidate
Member Candidate
Posts: 245
Joined: Tue Jul 07, 2015 2:40 pm
Location: Croatia, Zagreb

Re: Port 8000 forwarding for HIKVISION camera not working

Tue Nov 26, 2019 3:44 pm

I think first rule is problem, app exepcts 80 to be web port, yet you redirected it to 8080, try for test change it from 8080 to original 80.

Also you may need 554 UDP/TCP for RSTP stream.

Try also forward UDP of that 8000 for test.
 
User avatar
karlisi
Member Candidate
Member Candidate
Posts: 261
Joined: Mon May 31, 2004 8:09 am
Location: Latvia

Re: Port 8000 forwarding for HIKVISION camera not working

Tue Nov 26, 2019 4:47 pm

It's OK with dst-nat rules. You don't need 554/tcp or 8000/udp for iVMS application.
How do you connect to external address? From inside the LAN? If so, you need additional hairpin-nat rule.
---
Karlis
 
Zacharias
Forum Guru
Forum Guru
Posts: 1083
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Port 8000 forwarding for HIKVISION camera not working

Tue Nov 26, 2019 5:04 pm

You know you can always use the cloud right ?
But since you want to port forward, i want to ask a few questions.
Do you have a public IP configured on your router ?
You use a DNS name ? If yes do you get a responce when you ping that name ?
Finally, as for the config you posted, no need to use the dst address 100.100..... just specify the in interface, it must be the wan interface.
 
Serhioromano
just joined
Topic Author
Posts: 3
Joined: Tue Nov 26, 2019 1:50 pm

Re: Port 8000 forwarding for HIKVISION camera not working

Wed Nov 27, 2019 2:34 pm

You know you can always use the cloud right ?
Actualy I use the coud and use domain that was generated for me. But it does not work as well. This domain pings ok, to the same IP I am using. And as I've said I have port 80 woring with the same IP or cloud domain.
Do you have a public IP configured on your router ?
My public IP is dynamic
You use a DNS name ? If yes do you get a responce when you ping that name ?
No I do not
Finally, as for the config you posted, no need to use the dst address 100.100..... just specify the in interface, it must be the wan interface.
The 100.100.*** из my public dynamic address. When I use inretface it stops working even for port 80.
It's OK with dst-nat rules. You don't need 554/tcp or 8000/udp for iVMS application.
How do you connect to external address? From inside the LAN? If so, you need additional hairpin-nat rule.
I do not connect to an external address. Do you mean to my public IP? I connect it from within LAN or through my mobile operator. It makes no difference. And what does it mean "You do not need port 8000"? How is that? I am connecting mobile app not web browser access.
I think first rule is problem, app exepcts 80 to be web port, yet you redirected it to 8080, try for test change it from 8080 to original 80.

Also you may need 554 UDP/TCP for RSTP stream.

Try also forward UDP of that 8000 for test.
The rules in command are in a different order than on the form. I redirect request to port 8080 to actual port 80. I mean in the webcam or in the local network I open cam web interface on port 80. When I open public IP with port 8080 it redirects to port 80. Any way that works fine, no issues on that.

I suspected that protocol might be an issue, so I try UDP on 8000. It doe snot change anything. I also added 554 port redirect but that also did not change anything. Still no access.
 
User avatar
karlisi
Member Candidate
Member Candidate
Posts: 261
Joined: Mon May 31, 2004 8:09 am
Location: Latvia

Re: Port 8000 forwarding for HIKVISION camera not working

Wed Nov 27, 2019 3:11 pm

My public IP is dynamic
It's OK with dst-nat rules. You don't need 554/tcp or 8000/udp for iVMS application.
How do you connect to external address? From inside the LAN? If so, you need additional hairpin-nat rule.
I do not connect to an external address. Do you mean to my public IP? I connect it from within LAN or through my mobile operator. It makes no difference. And what does it mean "You do not need port 8000"? How is that? I am connecting mobile app not web browser access.
Try also forward UDP of that 8000 for test.
I suspected that protocol might be an issue, so I try UDP on 8000. It doe snot change anything. I also added 554 port redirect but that also did not change anything. Still no access.
Yes, I mean public IP. And I wrote, you don't need 8000/udp (ivicask suggestion), only 8000/tcp (you already tried it).
Are you sure port 8000 is reachable from Internet (not filtered by provider)? Check if packets are coming to this port.
---
Karlis
 
Zacharias
Forum Guru
Forum Guru
Posts: 1083
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Port 8000 forwarding for HIKVISION camera not working

Wed Nov 27, 2019 6:56 pm

Actualy I use the coud and use domain that was generated for me
A cloud device does not need a DNS. I guess you mean the manufacturer gives you a free DNS to use, but this is not what i mean.
 
gotsprings
Forum Veteran
Forum Veteran
Posts: 802
Joined: Mon May 14, 2012 9:30 pm

Re: Port 8000 forwarding for HIKVISION camera not working

Sat Nov 30, 2019 4:13 pm

/ip firewall Nat export
"It ain't what you don't know that gets you into trouble. It's what you know for sure that just ain't so."
Mark Twain

Who is online

Users browsing this forum: No registered users and 85 guests