OK nothing China is safe. This is probably another topic by now but to be safe I should completely separate NVR and IPC's from my main network (only access TO these devices) and no internet. This has a downside of not having remote access by the mobile app (DMSS).
So for me a good setup would...
My first approach would be to use router's firewall to block cameras' mac addresses from accessing internet. Secondly I would create a separate vlan for cameras but right now I have an unmanaged switch.
But another question arises for me: NVR has an accesst to the internet. Is NVR safe in terms...
Ok looks like I need to get an 8-port POE switch. Thanks for clarifying.
Looks like this would work only if I had cameras directly on my main network. I doubt setting IPC ip address manually to another subnet somehow skips the subnet and gateway of the subnet it is in by NVR's setting. Or is...
Unfortunately can not reach any other ip than the gateway itself on the 10.1.1.x
root@OpenWrt:~# nmap -sn 10.1.1.0/24
Starting Nmap 7.91 ( https://nmap.org ) at 2023-10-01 17:08 EEST
Nmap scan report for 10.1.1.1
Host is up (0.0069s latency).
Nmap done: 256 IP addresses (1 host up) scanned in...
I have 8 cameras total on the 10.1.1.0 network and I can't ping nor access with a browser any of them.
I have firewall disabled on all IPCs by default on all options: Network access, PING Prohibited, Prevent Semijoin
On IPC I also tried to enable SSH, Private Protocol Authentication to...
I did set IPC DNS to match the gateway 10.1.1.1 - still can't ping 10.1.1.70
I also tried to set DNS on NVR to 192.168.1.1 (default was 8.8.8.8) it did nothing,
Here are other settings on NVR:
And on the IPC:
Well I assume 10.1.1.1 is the NVR as a gateway in 10.1.1.x subnet, it answers to ping.
I changed IPC gateway to 10.1.1.1 but no success.
root@OpenWrt:~# ping 10.1.1.1
PING 10.1.1.1 (10.1.1.1): 56 data bytes
64 bytes from 10.1.1.1: seq=0 ttl=64 time=4.682 ms
root@OpenWrt:~# ping 10.1.1.70
PING...
Sorry, yes, current target is 10.1.1.0/24. I just tried different solutions and pasted here the wrong version.
On ithe IPC web interface I see my router is the default gateway too.
Still can't reach 10.1.1.70
root@OpenWrt:~# ping 10.1.1.70
PING 10.1.1.70 (10.1.1.70): 56 data bytes
^C
---...
I added route on my OpenWrt router but it does not seem to work.
config route
option interface 'lan'
option gateway '192.168.1.108'
option target '10.1.1.70/24'
Does firewall need configuration also?
Hi
I have Dahua NVR DHI-NVR4108-8P-4KS2 (firmware V4.001.0000005.1) and 8 Dahua cameras connected to POE ports.
NVR has an ip 192.168.1.108, cameras are on different subnet 10.1.1.X managed by the NVR.
I am trying to control the LED's on my cameras programmatically instead of the cameras own...