Dual NIC NVR setup

[slowm]

Hello everyone,
I am really running out of ideas what's wrong with my setup. I have DS-7716NI-I4 with dual NIC. In order to have to have LAN with cameras completely separated from the internet I connected them all to one switch which is connected to LAN 2 port on the NVR, on each camera I set static IP 192.168.2.1-16. I used LAN 1 port to connect my ISP router (which has DHCP enabled, 192.168.1.0/24)
NVR is set to use multi-address setup. For the LAN 2 I manually set NVR's IP address to 192.168.2.250, same IP address as a gateway (I am not sure if this is correct or if it even matters), mask to 255.255.255.0, default route is set to LAN 1,
For LAN 1 I manually set a static IP address from router's range (192.168.1.123), gateway set to router's IP 192.168.1.1.

Now the problem. When I connect the router to LAN 1 and switch with cameras to LAN 2 then NVR can't connect to cameras (each tile in live stream grid has generic error, something like 'can't get parameters or features'). BUT, when I disconnect the router from LAN 1 port then after few seconds NVR connect all cameras just fine, After that I can connect the router back to LAN 1 and everything works. I can see live stream locally via HDMI and also connect remotely via hik connect app. The problem happens again when I connect new camera, NVR can't get the image till I disconnect the router again. Then it works. (I thought I can live with this but this will of course also happen on each reboot)

Cameras are all hik-vision, I think the only thing I changed in their setup is IP address (from the default to 192.168.2.x), now when I think about probably each has gateway set to 192.168.1.1, but this should not matter right? There is no router on LAN 2 anyway.
I am wondering what is happening and what am I missing. Until now I thought I had enough networking skills to solve this, but I am really humbled by not being able to figure this out.

 

[IAmATeaf]

You mention that the NVR is set to the same IP as a gateway? Each IP address of any device on the same network must be unique.

 

[slowm]

As part of LAN 2 configuration on the NVR I set the NVR IP address to 192.168.2.250 and used the same address for gateway. I kinda of assumed that NVR will be my gateway as there is nothing else that could be. I think I even tried to put there router's address from LAN 1, but I believe this also doesn't make sense because no device from LAN 2 should be able to communicate with anything on LAN 1. And there is no router on LAN 2, just bunch of cameras connected to dummy switch which is connected to LAN 2 port. Should I leave gateway just empty? Sorry I wasn't more clear.

 

[slowm]

So I tried different settings and still no results. I even tried to connect another router (not connected to internet) to LAN 2 which would provide dhcp server for 192.168.2.0/24 network and set gateway on NVR and all cameras to its IP 192.168.2.1.

Here is a summary of current setup:
Selected multi-address mode. Default route set to LAN 1.

NVR LAN 1 (192.168.0/24)

• port connected to ISP router (192.168.1.1)
• static ip 192.168.1.123
• gateway 192.168.1.1
• mask 255.255.255.0
• mtu 1500

NVR LAN 2 (192.168.2.0/24)

• port connected to switch with all cameras
• static ip 192.168.2.123
• gateway 192.168.2.1
• mask 255.255.255.0
• mtu 1500

Cameras:

• 192.168.2.2 - 192.168.2.17 (192.168.2.1 is now used for router's IP on LAN 2)
• gateway 192.168.2.1

All I could find in the manual is:

Multi-address mode
The parameters of the two NIC cards can be configured independently. You can select LAN1 or LAN2 under Select NIC for parameter settings. Select one NIC card as the default route. When the system connects with the extranet, the data will be forwarded through the default route.

Which I believe is exactly what I have.

it still behaves the same. When I reboot NVR it won't connect to cameras til I disconnect cable from LAN 1 port. Then I connect it back and everything works. HALP

 

[alastairstevenson]

Do you have LAN1 set as the default route?

I used the same arrangement with a DS-7716NI-E4 at my local Men's shed - but I don't recall the detailed settings.
The cameras are all on one of the LAN interfaces, the other interface is connected to the building network.
Unfortunately I won't be able to go and check the settings used due to the new Covid-19 lockdown that's been imposed.

 

[alastairstevenson]

I used the same arrangement with a DS-7716NI-E4 at my local Men's shed - but I don't recall the detailed settings.

I was at the local Men's Shed today, and took some screenshots of the NVR configuration, which I think is the same general arrangement as you are using.
The NVR has 2 LAN interfaces, with LAN1 being connected to the building network, with similar network settings to a single LAN NVR.
LAN2 is connected to an external PoE switch with the cameras connected to an untagged VLAN segment on the switch, except for one 3rd party camera (IC-Realtime [Dahua ...]) which would not connect reliably on the VLAN.
The default gateway IP address on LAN2 is fictitious.

I've not seen any problems with the arrangement.
I hope that helps.

 

[slowm]

Thank you @alastairstevenson. Looking at your screenshots I don't see anything different from my setup. Last time I went the the site I set up the router on NVR LAN (192.168.3.0/24) and allowed routing to my main network 192.168.2.0/24 with all computers and internet access. It works fine but It doesn't feel right that for some reason I need to bridge these 2 networks, kinda defeating dual NIC NVR. Anyway I was glad I somehow got it working before Christmas.

I run a packet capture on the router and it looks like a NVR is accessing cameras from incorrect network interface.
16:18:26.480386 IP 192.168.2.123.57676 > 192.168.3.9.554: Flags [.], ack 341928, win 40595, length 0
16:18:26.481002 IP 192.168.2.123.35792 > 192.168.3.17.554: Flags [.], ack 1303972, win 40595, length 0
16:18:26.482196 IP 192.168.3.16.554 > 192.168.2.123.52326: Flags [P.], seq 202348:202436, ack 505, win 591, length 88: RTSP

I am wondering if it could be something really stupid in networking (like cable connected to wrong port or something, but it reaally should be fine). Anyway I can't verify it right now and I am scared to mess with network configuration remotely.
Thanks for help and have a nice weekend and happy new year!

 

[alastairstevenson]

Yes, it's the same general setup.
The real difference is the NVR model and firmware.
I think the NVR 4 firmware was a big rewrite, so maybe chances for bugs still.

 

[Zenjensen]

Hi Guys,

I just want to share my encounter.

NVR Lan 1: 192.168.254.200
NVR Lan 2: 172.20.30.5

Router/Network Gateway: 10.40.80.1

The cameras are are working and can be viewed using monitor directly to NVR. Using Hikconnect on phones while on mobile data network is also working. However, in their internal network which when I connect to wifi and in DHCP. I cannot detect the NVR using IVMS.

Looking at the thread.

1. I must connect Lan 1 in the same gateway as Router/Network Gateway correct? and it can be detected using IVMS?
2. If I change Lan 1 to in line with the network gateway, the Hikconnect will not have any issues right?
3. Is 192.168.254.200 not bridged to the router gateway? Other option is to set rules to bridge the 192 ip to the 10.40 gateway?

I would appreciate replies. It will help me a lot.

 

[Flintstone61]

if the LAN router on 10.40.80.1 is your local network.....then LAN 1 of NVR would need to be a 10.40.80.2-254....address

 

[Zenjensen]

if the LAN router on 10.40.80.1 is your local network.....then LAN 1 of NVR would need to be a 10.40.80.2-254....address

I will work it out tomorrow. I hoping for the best Bro.

 

[trempa92]

The firmware you have (2019 - 4.22.005) had weird bugs in the past , if you ask me how i know is because i remembered the version and that's never a good sign when i remember firmware versions.

Since you are on (B) here is 2022 firmware:

DS-7716NI-I4(B)

Hikvision DS-7716NI-I4(B) 16-ch 1.5U 4K NVR

www.hikvision.com