Community discussions

MikroTik App
 
Josephny
Member
Member
Topic Author
Posts: 454
Joined: Tue Sep 20, 2022 12:11 am

I'm stumped (but I wish I wasn't).

Sat Jan 28, 2023 11:01 pm

I am trying to set up an IP camera remotely. The IP camera's defaul IP is 192.168.1.108

I am at site A with a hEX at 192.168.2.2

The camera is at site B with a hAP at 192.168.20.1

They have a wireguard connection between them.

From my PC (192.168.2.22) I can ping 192.168.20.1, as well as other devices physically located at site B in the 192.168.20.x subnet.

I added the IP ADDRESS 192.168.1.100/24 to the hAP assigned to the bridge (which includes all the physical ethernet ports).

From winbox connected to site B (192.168.20.1) I can ping 192.168.1.108 (the camera).

From winbox connected to site A (192.168.2.2) I can ping 192.168.1.100 (the router at B) but not 192.168.1.108 (camera).

From my PC (192.168.2.22) I can ping 192.168.1.100, but not 192.168.1.108

But, I need to access the camera with a web browser to change it's IP address and I am unable to get connectivity from my PC (192.168.2.22).

Using packet sniffer on the hEX (192.168.2.2) I can see my ping attempts to 192.168.1.108 go out but nothing coming back.

Using packet snigger on the hAP (192.168.20.1 AND 192.168.1.100) I can see those same ping attempts created on 192.168.2.2 come in but no packets with a src of 192.168.1.108

It feels like 192.168.1.108 is not getting the ping packets except when they come from 192.168.1.100
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11438
Joined: Thu Mar 03, 2016 10:23 pm

Re: I'm stumped (but I wish I wasn't).

Sat Jan 28, 2023 11:08 pm

Another very likely possibility is that default camera config is blocking connection attempts which originate outside own network (i.e. camera runs firewall). Or that default config doesn't include any routing information. Or that default config includes default route with gateway address other than address you added on hAP B.

Either way, if you configure src-nat (targeting dst-address of 192.168.1.0/24) on hAP B, you will probably be able to connect to it remotely.
 
User avatar
Larsa
Forum Guru
Forum Guru
Posts: 1041
Joined: Sat Aug 29, 2015 7:40 pm
Location: The North Pole, Santa's Workshop

Re: I'm stumped (but I wish I wasn't).

Sat Jan 28, 2023 11:29 pm

Another option is to connect remotely to a PC on site B . If available install and use the camera management software that might be able to communicate with the camera using the MAC address, otherwise add network 1 to the local lan interface on the PC. Then change the address on the camera to use network 20.

option 3, set up a new network 1 on site B and from site A add routing to site B for network 1.
 
Josephny
Member
Member
Topic Author
Posts: 454
Joined: Tue Sep 20, 2022 12:11 am

Re: I'm stumped (but I wish I wasn't).

Sat Jan 28, 2023 11:41 pm

Another very likely possibility is that default camera config is blocking connection attempts which originate outside own network (i.e. camera runs firewall). Or that default config doesn't include any routing information. Or that default config includes default route with gateway address other than address you added on hAP B.

Either way, if you configure src-nat (targeting dst-address of 192.168.1.0/24) on hAP B, you will probably be able to connect to it remotely.
Changed the router's ip to 192.168.1.1 and it worked.

You were totally right: The camera's default gw did not match what I had set at the router.

Thank you!
 
Josephny
Member
Member
Topic Author
Posts: 454
Joined: Tue Sep 20, 2022 12:11 am

Re: I'm stumped (but I wish I wasn't).

Sat Jan 28, 2023 11:52 pm

Another option is to connect remotely to a PC on site B . If available install and use the camera management software that might be able to communicate with the camera using the MAC address, otherwise add network 1 to the local lan interface on the PC. Then change the address on the camera to use network 20.

option 3, set up a new network 1 on site B and from site A add routing to site B for network 1.
Site B is a very basic environment that supports a few people's cell phones, maybe one laptop, a video viewer tablet, a temperature sensor and now a camera. It's basically a cabin in the woods.

I've been thinking about adding a dedicated device of some sort (Raspberry Pi, or tiny-mini headless PC, or something), but then I think: The MT devices are little computers.

Now if there was a simple browser tool, that would be cool.

Thank you!

Who is online

Users browsing this forum: Bing [Bot], Google [Bot], truefriendcz and 92 guests