WAN Access to FOSCAM Security Camera

Toggle sidebar Toggle sidebar
F

fort384

Reputable
Apr 20, 2014
8
0
4,510
Hi,
I am trying to get external network access to a FOSCAM FI9821W V2. My network setup is a bit complicated...

Here is the path to the FOSCAM IP Camera:
-Internet comes in through an AT&T DSL to a NETGEAR Wireless ADSL Firewall Router DG834G.
-A ubiquiti NANOSTATION Wireless bridge is connected to the NETGEAR router
-Another ubiquiti NANOSTATION receives the signal on the other end at my outbuilding
-A ubiquiti AirRouter is connected to the NANOSTATION
-The FOSCAM IP camera is connected to the AirRouter

In order to get outside access, I have given the FOSCAM a static IP, and set it to PORT 90

The AirRouter has port forwarding setup to the static IP address of the FOSCAM on PORT 90

The AirRouter is also given a static IP by the NETGEAR Router, and is setup to forward incoming requests on PORT 90 to the WAN IP Address of the AirOS router.

When I try to connect using my NETGEAR WAN IP to Port 90, the log shows in incoming request attempt and appears to be forwarding it, but I don't get anything.

I can't see any way to determine if the traffic is making it to my AirOS router or the camera.

To add to the complexity, my NETGEAR gets a dynamic IP from AT&T. Foscam comes with a DDNS server to combat this. If I put in the DDNS address provided with the camera without PORT 90, it reaches the log in page of my NETGEAR router. If I put the address with :90 as the port, it just times out and doesn't connect.

To simplify, the path is:

Internet -> AT&T DSL -> NETGEAR Router 1 -> Ubiquiti Nanostation Bridge -> Ubiquiti AirRouter -> Foscam Camera

I have tried multiple ports (88,90, 8760, 8090, etc). I have been unsuccessful with all of them.

Any ideas how I can get external traffic to this camera so I can log in remotely and see what is going on? Camera works great while I am connected to the AirRouter network... but I don't have a big need to see what is going on when I am standing next to my LAN :).

Thanks!

 
Solution
B
Using the LAN port works because the 4 LAN ports of a router are just a switch and share the connection with the wireless radio chip as well.

The reason DMZ (De-Militarized Zone) worked is becasue it is bassically putting your camera in front of the router firewall so it has none of the routers protection on it and it is fully open to the internet

All routers use what is called a NAT firewall. It conceals your local IPs/computers from the internet. This is why you need port numbers, all of your network's internet traffic uses the internet IP and then it adds on port numbers which the router then knows which port number is for which local IP.
Sort by date Sort by votes
B

boosted1g

Titan
Jun 12, 2013
14,846
8
74,965
When you say you try to connect from the wan is that from a cell phone using 3g/4g, a friends/family network or from inside your network?
To test it you need to be on a different network then your own.

You have lots of pieces in your network chain. They either need to all have nat and dhcp dissabled on them, or you need to forward that port along every single device in order for it to get to your foscam.

Just to make sure I have the right idea, is this correct?
Internet via DSL > DSL MODEM/ROUTER Device > NANOSTATION pluged into router> NANOSTATION receiving wifi from other NANOSTATION > Air-router plugged into NANOSTATION > FOSCAM.

For troubleshooting you should do one hop at a time, Connect camera directly to first dsl router, then try connecting to nanostation bridge, and then lastly try it connected to your airstation.

Do these networks all share the same IP subnet (so if dsl router IP is 192.168.1.1, then all devices are 192.168.1.x)?
 
Upvote 0 Downvote
F

fort384

Reputable
Apr 20, 2014
8
0
4,510
Yes, I used my iPhone on LTE to try and connect.

You have the right idea on the chain.

I'll have to disassemble some stuff to test it just on the DSL Modem/Router (NETGEAR) device.

The nanostations are setup to act only as a "long network cable" in APS-WDS/Station-WDS so no port forwarding should be necessary through the nanostations. Just the NETGEAR Router and the Ubiquiti Router should require port forwarding, is my understanding. The WAN IP of the Ubiquiti Router is assigned directly from the NETGEAR router and has a DHCP reservation, and shows as directly corrected in the "connected devices" area of the NETGEAR interface.
 
Upvote 0 Downvote
F

fort384

Reputable
Apr 20, 2014
8
0
4,510
Forgot to add, the subnets if I understand you correctly, are different:

The netgear (router 1/DSL router) assigns IPs 192.168.0.1-255 and the Ubiquiti (router 2/other side of bridge) assigns IPs 192.168.1.1-255.
 
Upvote 0 Downvote
B

boosted1g

Titan
Jun 12, 2013
14,846
8
74,965
On the netgear are you port forwarding to the foscam IP or the second router's IP?

If you do not need the two locations on seperate subnets it would be better to configure your second router to be an access point. Right now you have two seperate networks, as an access point it will be just one big network.

You will need to dissable DHCP, dissable NAT and dissable SPI firewall, assign second router to 192.168.0.2 (you will need to set the netgear router to not start dhcp until say 192.168.0.10), and then plug the nanostation into a lan port instead of the WAN port.
 
Upvote 0 Downvote
F

fort384

Reputable
Apr 20, 2014
8
0
4,510
That does seem desirable - I do not need 2 separate networks. So if I just disable DHCP, NAT, and firewall on the AirRouter, assign a DHCP reservation for it on the netgear, and change the dhcp to start a bit higher, I will be all on the same network? I didn't realize a router worked that way... I didn't realize that a LAN port could get a connection "in" but then what I know about networking equipment you could write on the back of a cocktail napkin.

I was able to get this setup working as it currently is, by placing router 2 (the airrouter) into DMZ mode and forwarding all to the IP of the camera. This tells me that the netgear was port forwarding appropriately, and that the problem lies somewhere with the setup of the AirRouter... for now leaving it in DMZ works. I'll try and set it up as a single network next weekend and see how that does.
 
Upvote 0 Downvote
B

boosted1g

Titan
Jun 12, 2013
14,846
8
74,965
Using the LAN port works because the 4 LAN ports of a router are just a switch and share the connection with the wireless radio chip as well.

The reason DMZ (De-Militarized Zone) worked is becasue it is bassically putting your camera in front of the router firewall so it has none of the routers protection on it and it is fully open to the internet

All routers use what is called a NAT firewall. It conceals your local IPs/computers from the internet. This is why you need port numbers, all of your network's internet traffic uses the internet IP and then it adds on port numbers which the router then knows which port number is for which local IP.
 
Upvote 0 Downvote
Solution
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom