Changed to openVpn but,

[dee]

side note for future folks searching the forums about bridge routers and why:
some ISP's (your internet provider) supply you with their own modem (I have Charter so I have the Charter cable modem). These can be identified as a coaxial cable going in and a SINGLE RJ45 port coming out. This would only be a modem, you are required to self purchase your own router. Some ISP's supply you with a combination modem/router (which may or may not have WiFi enabled) that have a coaxial cable going in and multiple (usually 5) RJ45 ports coming out. These ISP combination modem/routers are not every configurable so many folks convert the combination modem/router into just a modem, which is called BRIDGING. We then purchase our own routers that can be highly configured (example: can add OpenVPN to it, USB storage device, more control over WiFi options, etc) and connect to the BRIDGED ISP combination modem/router.

There was no way to get there. REFUSED.
So I did the only thing I could. I rebooted my router. Now I have to make all kinds of changes. The first one I had to make was to change to 192.168.0.1
This had to be done because all of my cameras ip end with 0.x instead 1.x

 

[catcamstar]

There was no way to get there. REFUSED.
So I did the only thing I could. I rebooted my router. No I have to make all kinds of changes. The first one I had to make was to change 192.168.0.1
This had to be done because all of my cameras ip end with 0.x instead 1.x

Dee, nothing "had" to be done You could connect your pc with the cam in direct (or through POE switch), and avoid the hassle of reconfiguring your complete network. Even more: Dahua Configtool is able to fetch "off-subnet" camera's and inject a proper new IP address in the cameras.

And while you are at it, it is a best practice to put a "non standard" (eg. 192.168.0.x or 192.168.1.x) ip range into your (VPN) router. The day you go to a place with the same range as you have (eg. Hotspot in McDonalds), you will never reach your BI pc when being "twice" on the same subnet. So put something like 192.168.105.x in your ASUS.

As I'm still waiting for your DRAWING (see previous page), I suggest you start with doing a factory reset of your ASUS, configure it in a unique (local) subnet. Then look in the "network map" screen and note down and report that WAN IP address here.

That's step 1.
Step 2: install your android BI app again on your phone
Step 3: make sure BI app works on your phone.

--> if this doesn't work: go back to step 1.
--> if this work: go to step 4:
Step 4: configure VPN server on Asus
Step 5: download .ovpn and import in your phone
Step 6: DISCONNECT FROM YOUR LAN/WIFI and TURN ON 4G
Step 7: connect the OpenVPN client (peaking graphs = OK!)
Step 8: open BI app (like in step 3) and it should work!

--> if this doesn't work: go back to step 1

Hooray!

Do not report back until you reached step 8

Good luck!
CC

 

[dee]

So now I am back to square 1.

Blue Iris, under settings-web server-Remote access Wizard, the 5th page says:
"If your router shows its gateway is 192.168.x.x or 10.x.x.x, then its connected to another router, not the internet directly. You can solve this in one of several ways:
Connect you PC to the other router; set the main router to DMZ, or forward ports to this router; or reconfigure this router as an access point or switch instead of a gateway."

Well mine is
Default Gateway . . . . . . . . . : 192.168.0.1

So what should I do?
I am not crazy about DMZ
I tried configure my router as access point instead of gateway. That did not work.

 

[catcamstar]

So now I am back to square 1.

Blue Iris, under settings-web server-Remote access Wizard, the 5th page says:
"If your router shows its gateway is 192.168.x.x or 10.x.x.x, then its connected to another router, not the internet directly. You can solve this in one of several ways:
Connect you PC to the other router; set the main router to DMZ, or forward ports to this router; or reconfigure this router as an access point or switch instead of a gateway."

Well mine is
Default Gateway . . . . . . . . . : 192.168.0.1

So what should I do?
I am not crazy about DMZ
I tried configure my router as access point instead of gateway. That did not work.

What happens when you do "http://192.168.0.1" --> does this give you your ASUS webpage?

(PS. how many IP's do you think you'll get from your ISP with your router in access point mode? the first device gets your WAN IP and the rest is pushed off. Off course it didn't work that way.)

 

[looney2ns]

Changed to openVpn but,

When I connect via OpenVpn on android phone, I only see connection stats on a moving chart.
How do I then get to see Blue Iris?

This is what you are seeing, correct?

This shows you are connected to your VPN. To see BI App, press the circle at the bottom of your phone screen to minimize the stats screen.
Then open the Blue Iris app. Be sure you have setup the Bi app with the IP address of your BI machine in both the Lan and Wan fields.
Be sure to enter your login info on the same screen.


At this point, I would power cycle everything, BI computer, router, and any switches.

 

[catcamstar]

This is what you are seeing, correct?

At this point, I would power cycle everything, BI computer, router, and any switches.

This can't be happening @looney2ns - you can't take screencaps of these spikes! See 2nd post (Changed to openVpn but,)...

I hope @dee does not reinvent the wheel

 

[iseeker]

Dee, nothing "had" to be done You could connect your pc with the cam in direct (or through POE switch), and avoid the hassle of reconfiguring your complete network. Even more: Dahua Configtool is able to fetch "off-subnet" camera's and inject a proper new IP address in the cameras.

And while you are at it, it is a best practice to put a "non standard" (eg. 192.168.0.x or 192.168.1.x) ip range into your (VPN) router. The day you go to a place with the same range as you have (eg. Hotspot in McDonalds), you will never reach your BI pc when being "twice" on the same subnet. So put something like 192.168.105.x in your ASUS.

As I'm still waiting for your DRAWING (see previous page), I suggest you start with doing a factory reset of your ASUS, configure it in a unique (local) subnet. Then look in the "network map" screen and note down and report that WAN IP address here.

That's step 1.
Step 2: install your android BI app again on your phone
Step 3: make sure BI app works on your phone.

--> if this doesn't work: go back to step 1.
--> if this work: go to step 4:
Step 4: configure VPN server on Asus
Step 5: download .ovpn and import in your phone
Step 6: DISCONNECT FROM YOUR LAN/WIFI and TURN ON 4G
Step 7: connect the OpenVPN client (peaking graphs = OK!)
Step 8: open BI app (like in step 3) and it should work!

--> if this doesn't work: go back to step 1

Hooray!

Do not report back until you reached step 8

Good luck!
CC

On step 5 - what is a good method to import to iPhone/iPad? I used iTunes a few years ago. Is there an easier, secure method, in your opinion?

 

[catcamstar]

On step 5 - what is a good method to import to iPhone/iPad? I used iTunes a few years ago. Is there an easier, secure method, in your opinion?

What you prefer what is the most secure way... You can do box, stack, whatever file transfer (but then that cloud provider might see that .ovpn file), or you mail it to yourself by your favorite (ISP) mail provider (whether you trust them because they also see that .ovpn file). If you want to opt for a midst, you can send yourself 200 ovpn files, all bit different and you note down the correct one Security by obscurity

 

[catcamstar]

On step 5 - what is a good method to import to iPhone/iPad? I used iTunes a few years ago. Is there an easier, secure method, in your opinion?

What you prefer what is the most secure way... You can do box, stack, whatever file transfer (but then that cloud provider might see that .ovpn file), or you mail it to yourself by your favorite (ISP) mail provider (whether you trust them because they also see that .ovpn file). If you want to opt for a midst, you can send yourself 200 ovpn files, all bit different and you note down the correct one Security by obscurity

 

[Holbs]

With the Netgear router, upon signing up you download the .opvn file to your PC. I then emailed from my PC to my google email. New email and attachment popped up on my smartphone. Downloaded to my smartphone. whalla.

 

[iseeker]

Security by obscurity

. Lol! That made me laugh. But maybe....hmmm

With the Netgear router, upon signing up you download the .opvn file to your PC. I then emailed from my PC to my google email. New email and attachment popped up on my smartphone. Downloaded to my smartphone. whalla.

. I know that is the easy route; just doesn’t feel like a secure way to start my secure connection. Maybe I can upload it to my Synology DiskStation, then grab it through the DS File app. I’ll try that next time (helping a friend setup Synology too)

 

[looney2ns]

. Lol! That made me laugh. But maybe....hmmm

. I know that is the easy route; just doesn’t feel like a secure way to start my secure connection. Maybe I can upload it to my Synology DiskStation, then grab it through the DS File app. I’ll try that next time (helping a friend setup Synology too)

You are over thinking it, sent it via email to your phone, and be done.

 

[catcamstar]

You are over thinking it, sent it via email to your phone, and be done.

I'm not so sure about this. If you send the .ovpn files WITH the certificates inline, without configuring a username/password on each connection, your "mail provider" (fill in: google/yahoo/hotmail/.. ) can get in whenever they want...

I like the idea of DS File or any other "real private cloud" solution, not like google drive, box and others.

 

[IAmATeaf]

Just transfer them over manually in that case, I don’t know about android but with iOS I just used iTunes to transfer the required files onto the phone.