4G Network architecture help needed

[0blar]

Hi

Friend of mine get 4 IPC-HDW5231R-ZE and 1 Nvr NVR5216-8P-4KS2.
Cameras are connected to the nvr.
He also has an IP Alarm.

His network architecture is as follow:

​

Everything works ok exept i need to open a special port for the Alarm to be connected to his Application. Alarm will only connect through this specific port.

As he is using a 4G network, his provider only assigne private IP (public ip is not possible to get in his area) and it is not possible to open any port to allow incomming connexions.

My question, i hope to not disturb this forum, is related to a solution to get this specific port to be reacheable from the outside (wan side).

I'm using dahuaddns from the nvr to get the Wan IP.

Will Vpn realiable for this ? How to do it ?
Another solution using a router and port forward this specific port will be possible ?
Any hardware and solution to advise me ?

Thanks again

 

[tangent]

You'd need an outboud VPN connection from the network that's on 4G to your own vpn server elsewhere.

 

[0blar]

Thanks for your response

If i understood correctly, i will need to set up a vpn client from my friends place to a vpn server in his home.
Any hardware router to advise ?
I see people in this forum advising Ubiquiti Edgerouter Lite and Asus RT-AC68U, what do you think ?

 

[tangent]

The edge router is nice, but setting up a VPN on it is difficult. Whatever routers you use make sure you disable UPnP: Yet another reason to disable UPnP on your router!

 

[0blar]

UPnP is disable on the nvr side.
Regarding router, any advise ?

 

[tangent]

UPnP is disable on the nvr side.
Regarding router, any advise ?

I was saying that it's important to turn off UPnP on your router.

Most any router that includes a VPN server will work. Asus have some good options, but there are others.

 

[0blar]

ok, UPnP will be Off