Port Forwarding Guide

Transcription

1 Port Forwarding Guide 1/05/2012 Ver. 2.0

2 P a g e 1 Introduction Port forwarding is the process of allowing exceptions on your router s firewall in order for traffic to be communicated to the open public. It is necessary to perform port forwarding on your router in order to view your live stream from your DVR or IP System, playback footage from your DVR or IP System, remotely control a networked device or access your surveillance system from your favourite smart phone. Port forwarding can have many terms such as Port Mapping, Firewall Exception or Network Address Translation, they all perform the same tasks. Example Diagram 1 Concept As you can see by the diagram above, the Onsite Network is protected by a firewall. The firewall is indicated by the red line around the network. Inside the network, there are many devices. Each device has its own I.P. address, and its own ports. In order for the iphone or the Home Network to communicate to the DVR inside the Onsite Network, they need to ask permission from the Onsite Network to talk to the DVR. The iphone and Home Network will ask the router if it can access the DVR using specific ports. If the ports match the DVR, the router will check its Port Forwarding rules and allow access. Without port forwarding, the firewall is completely closed and no devices will be able to talk to the DVR. Locally on the Onsite Network, PC1 and PC2 are able to dial into the local DVR using its local IP Address ( ). In this scenario, there is no port forwarding required. Locally no devices are protected by the router. If the Home Network or iphone wanted to access the DVR, it would dial into the DVR using the WAN (Wide Area Network) Address. This is also known as an ISP IP Address or an External IP Address. This IP address is assigned to your internet connection from your Internet Service Provider. In this case, the Home Network or iphone would use the IP address of to login.

3 P a g e 2 DHCP A DHCP (Dynamic Host Configuration Protocol) is a network protocol that assigns a device on the network an IP Address automatically. A DHCP is usually originated from a router, wireless access point or a managed switch. A device can choose whether it wants to have an IP Address assigned automatically (dynamic) or manually (static). Putting your device on a DHCP will essentially make it a dynamic IP device. Once the DHCP lease time runs out or when the device is restarted, it will be assigned a new IP Address. The unpredictability of a DHCP makes it hard to keep track of your device s IP Address. DHCP is not recommended to be used permanently, but rather a tool to confirm your device is communicating with the router. Static IP Address (External) It is recommended that your WAN (External) IP Address is static. Your external IP Address is provided from your internet service provided (TPG, Telstra, Optus etc.). It is recommended that the Onsite Network is static, not necessarily the iphone or the Home Network (Refer to diagram 1). A Static IP Address means that your External IP Address does not change. It is assigned permanently to your by your ISP and always remains the same. Think of an IP Address as a home address. All home addresses are static, because they remain the same. This makes it easy for the postman to find your house. The physical building will always have the same home address. In a network sense, your network will always have the same External IP Address. A static IP Address can be requested by your ISP for a small monthly fee. Many ISPs give out static IP Addresses free of charge. Dynamic IP Address (External) If it s the case that your ISP cannot give you a static IP Address, you will have a Dynamic IP Address. This means your External IP Address will change every so often depending on the ISP s DHCP lease time. A dynamic IP Address is not recommended for surveillance system as it makes it difficult to track down your IP Address because it changes so often. One method of rectifying this problem is to ask your ISP for a static IP Address. Another more technical solution to this problem is to use a DDNS Service. DDNS DDNS stands for Dynamic Domain Name Service. The Samsung SRD Series and NEO Series support this DDNS function natively through their own DDNS Servers. The Black Series PC based DVR can perform DDNS only through a third party DDNS Server (dyndns, no-ip, freedns etc.), and must be performed through the router. A DDNS provides a user with a domain name (a web link), which replaces an IP Address. This web link will always re-direct you to the same network regardless of how many times the IP Address changes. It will follow the dynamic IP Address. This makes it easier to track down your network even though the IP Address changes.

4 P a g e 3 Remote View Setup 1. You need to first assign your DVR a local IP Address. You need to go into the DVR s network settings and change the IP Address, Subnet Mask, Gateway and DNS Server. To confirm your DVR is communicating on the network locally, change your DVR to DHCP. See if the router gives you an IP Address automatically. This confirms clear communication with the router. To find an available IP Address on the network, you need to use a Windows PC or Laptop on the network. a. Go to the command prompt of the PC by going to the Start Menu, and typing in run in the search bar, and press enter. b. You should now see the run application pop up, now type in cmd to access the command prompt. Press OK to continue. c. Type in ipconfig on the command prompt, and press enter. As you can see, this will give you the details about your network. It gives you the IP Address of the computer you are using, Subnet Mask and the Gateway of your network. The Gateway is the IP Address of your router.

5 P a g e 4 d. Now you need to find an available IP address on the network to assign to you DVR. You will need to ping (process of sending packets to an IP Address to see if it responds) an IP Address on the network. Since the computer s IP Address is (according to previous diagram), we will need to change the host octet of the IP Address (the last number in the 4 number sequence). You can use any number between 1 and 254. So let s try to send a ping command to host number 51. Type ping into the command prompt and press enter. As you can see, the ping sent 4 commands to that IP Address. Each ping command received a reply in less than 1 millisecond. This indicates that there is a device using that IP Address and we should not use for the DVR. e. Let s try to ping the next host in line. ping , press enter. As you can see, there are no replies from that IP Address. It says host unreachable, which means that there is no host using that IP Address. You are free to use that IP Address for your DVR. Please make sure that the first three sets of numbers in your IP Address ( ?) are the same as your computer s IP Address. Use the subnet mask and gateway retrieved from the ipconfig command in step c. If your network does not run a DNS server, use the Gateway s address as the DNS Server.

6 P a g e 5 2. Now you have given your DVR a local IP Address, see if you can access the DVR locally. Check the network settings of the DVR to find out what ports it uses. To access the DVR locally, use any PC on the same network as the DVR. Open Internet Explorer and type in the IP Address followed by a colon and the DVR s Web Port, for example: You should be able to log in and see your cameras locally. 3. To be able to see your cameras externally from another network, you will need to perform Port Forwarding on your router. Every router has a different method and terminology to port forward. It is recommended you read the router s manual or consult the router s supplier on how to port forward. A great guide on how to port forward on your router is to visit: a. Click on Router > s b. Select your router model from the large list or routers. Make sure you get your router s model number physically from the router itself. c. Now the next screen should offer you a large list of applications you may port forward for. Just choose Remote Desktop as the application. Remote Desktop uses port Just replace 3389 with your DVR ports when following these instructions. d. You will now be forwarded to step by step instructions on how to port forward on your router. Check your DVR s network settings to see what ports need to be forwarded. Chances are that there are multiple ports that need to be forwarded.

7 P a g e 6 Please see below default ports of all of EOS DVRs. DVR TCP Port Web Port Samsung SRD Series SVR SVR-3200/1680/1645/ SVR-470/450/ (SVR-470 only) SVR-1650/1640/ not supported Neo DVR-412/824/1648NEO (H.264) DVR-BLACK4000NEO (H.264) DVR-BLACK4/800/1600NEO (MPEG4) PC Based BLACK Series 3000/3001/3003/3007/ Digifort Digifort Server Digifort iphone App 8601 Digifort Analytics 8610 Digifort Licence Plate Recognition Verify your external IP Address by simply doing a Google search What is my IP Address

8 P a g e 7 5. Now you need to verify the ports are open on your router and the port forwarding procedure has been performed correctly. This can be done by using an online port scanner. Visit to do a port scan. Put in your external IP Address found in the previous step and ports you want to scan. You have the option to scan a single port or multiple ports at once. Then press Scan a. If your port forwarding is successful, you will see a result like this. Providing all the necessary ports are forwarded, you should now be able to access your surveillance system externally using you external IP Address extracted in step 5. b. If you are unsuccessful, you will see results like this. If you are unsuccessful still, please double check the following: i. Your DVR is on and has an Ethernet cable plugged in to the router. ii. You are able to access your DVR locally iii. Your router s port forwarding settings still exists in the router. If not, you will need to save the settings into the router. iv. Double check your External IP Address, make sure it hasn t changed since step 5, if it has; you have a dynamic IP Address and will have to use DDNS Service. If you require EOS assistance on site to perform the port forwarding, please fill out the below form and organise for a paid service call for one of our experienced technicians to perform the remote view setup for you.

9 Questionnaire for Remote View Setup P a g e 8 CCTV Installer: Name: Address: Contact Number: Date you wish to Book in: Questions Yes No How to find out Do you have a Modem Router? A Modem Router is a little box that your phone line connects to, used to gain internet access If yes, what Brand and Model Number? Is there an Ethernet cable from the Router to the DVR? Do you have a Static IP Address? Do you have a Dynamic IP Address? Is your Internet working? This is usually found on the bottom or the front of your Modem Router This cable is usually a blue cable with connectors with clips on each end. Please ask your installer to run this cable from the Router to the DVR This can be found out by asking your Internet Service Provider (e.g. TPG, Telstra, Optus) If you have a Static IP Address, you do not have a Dynamic IP Address Open up a web page on your web browser to check Do you have the Login details for your Router? Do you have the Username and Password for,your Internet Service? Do you have an I.T. Department or Network Administrator? Usually found in the Manual of the Router if the default Password hasn t been changed This can be found out by asking your Internet Service Provider (e.g. TPG, Telstra, Optus) This is a separate department that takes care of all your I.T. needs If yes, will that person be available on the day of setting up your DVR for Remote View? What Brand and Model DVR is installed on site? You will need to arrange a time suitable for them to be there to assist with this Remote View This is usually located at the front of the big boxthat records your cameras Please complete the above questions and fax back to (02) Or alternatively to support@eos.com.au