closed LAN IP camera system

Scapegoat303

Honorable
May 31, 2012
7
0
10,510
so I have one modem, one router. the router is going to be the 'hub' for the wifi cams. ill run a server through the same system for recording, etc. essentially i just want the router to handle all the wifi cameras. while the modem handles all the usual traffic via wifi and direct connect.
my problem is that when i try to do this either my router ends up in the same network as the modem (disabling DHCP on router) or not reading at all (noob confgs)

can i get some helps?
 
Solution
Simple solution, several steps.

Your gateway has a user ID and password, that if you change it and keep it to yourself cannot be altered thus the settings cannot be changed. The same with the ancient router. If the units are ever reset or the old router ever rebooted by anyone other than you, everyone except you loses Internet access for a month, and that should be explained up front to all users. So then they cannot shut it down, cannot change its setting or disable the video.

As far as the setup to use for the most security, I would use a shielded setup instead of just adding it to your existing network. That entails an Ethernet cable from a gateway LAN port to the WAN port of the old router, set the old router to use a...

RealBeast

Titan
Moderator
A terminology question (I assume what you call your modem is actually a gateway -- modem and router combined).

If you want them all on the same network disable the DHCP on the "router" that you use as a hub and give it a static address in the network range of the "modem" but outside the "modem" DHCP assignment range, connect the "router" and "modem" with an LAN to LAN Ethernet cable link. This will allow your "modem" to assign all addresses on the network and will not create a separate subnet. You may also want to turn off the wireless radio on the "router" if you do not want traffic through it other than the cameras. At a minimum, insure that the two wireless radios are not set to interfere with one another.

If you want to isolate the cameras to a distinct subnet it is a different setup. Please advice.

Also what models are the "modem" and "router?"
 

Scapegoat303

Honorable
May 31, 2012
7
0
10,510



thanks for the quick reply RealBeast!

essentially i just wanted to have a few wifi IP cameras hooked up to a closed wifi system (that once configured will not broadcast SSID) within the house that will still have access to the internet thru the gateway (yes, its a modem and router combined) -- that will still function if the Gateway has been shut off. the reason for the james bond configuration is:
we have teenagers, gateway is located in the living room out of sight from cameras - it was one of the first things i heard them mention.. "oh, just shut off the wifi to turn them off? whats the point?" ... *sigh*

my gateway is from comcast. says xfinity on the top front of the unit.
make: SMC Networks
model: smcd3gmv

my router is an OLD OLD router that has plenty of wifi range for the distances im trying to reach.
make: Netgear
model: MR814v2

i have some networking experience, i just don't exactly know the best way to accomplish what im trying to do. not sure if your suggestion will still be the most ideal way of doing this knowing the circumstances.

your thoughts?
 

RealBeast

Titan
Moderator
Simple solution, several steps.

Your gateway has a user ID and password, that if you change it and keep it to yourself cannot be altered thus the settings cannot be changed. The same with the ancient router. If the units are ever reset or the old router ever rebooted by anyone other than you, everyone except you loses Internet access for a month, and that should be explained up front to all users. So then they cannot shut it down, cannot change its setting or disable the video.

As far as the setup to use for the most security, I would use a shielded setup instead of just adding it to your existing network. That entails an Ethernet cable from a gateway LAN port to the WAN port of the old router, set the old router to use a different network (so if the gateway is 192.168.x.1, you make the old router 192.168.y.1 and give the old router a WAN address equal to the gateway at 192.168.x.1).

It is easier to visualize in a picture so look at THIS, and HERE is the description of how to setup the pictured setup. Your old router would be the one labeled "shield" and your gateway would be the "front" router.

It is an easy setup and along with good passwords and the warning about resets and powering down the shield router you should be good.
 
Solution

RealBeast

Titan
Moderator
Yes, that should work for you. If you have any issues we can work out the minor details, but that is the overview of what I recommend.

While not broadcasting your SSID is not really an effective deterrent against a real hacker, it may help with the kids and not confuse other family users. Any wireless sniffer or even free analyzer will still see the wireless signal.

One note, probably not an issue for you, but if any of the kids are power users you will want to have WPS turned off on your gateway and old router -- WPS is an opening for a Reaper attack that can open your security pretty fast (it is a side door attack on WPA2 wireless security). The basic issue is that WPS uses a short pin code that can be brute force guessed quickly (you can wiki Reaper attack if interested in details). Once open, the user can then change the WPA2 password to modify the gateway.
 

Scapegoat303

Honorable
May 31, 2012
7
0
10,510
thanks for all the help and advice so far !! im not too worried about hackers or anything. just want it out of sight out of mind.

The Gateway is able to see the router right now. i have the router plugged from its WAN port to the Gateways LAN port. I still cannot get through to the internet through the router.

set the range for gateway :
gatewayconfig.png

In the Gateway I reserved IP for Router:
gateway_IP_Reserved.png

*** NOTE: I Changed the IP for reserve to 192.168.0.100 after the screen capture.

In Router setup:
netg_config.png

EDIT: (also at bottom) what i did to get it to work from here is just edit the DNS information on the ROUTER. how i found the right DNS server IPs is i connected to the GATEWAY and did ipconfig /all in cmd, and the result gave me the two dns server IPs. put those into the routers DNS primary and secondary
Router Lan setup:
netg_lanipstgns.png


EDIT: IT WORKS! what i did to get it to work from here is just edit the DNS information on the ROUTER. how i found the right DNS server IPs is i connected to the GATEWAY and did ipconfig /all in cmd, and the result gave me the two dns server IPs. put those into the routers DNS primary and secondary and whammo, internets all over!

THANK YOU THANK YOU THANK YOU!!
 

TRENDING THREADS