Dual NIC setup on your Blue Iris Machine

Unfortunatly you have to fill in a gateway in the dahua camera's so i have them all point to 192.168.2.245.
Why? Mine are blank on gateway (actually all my cameras are set with blank gateways and fixed ip addresses so cannot get access to internet, also I use a Ubiquity router with these blocked as well, but the logs tell me they no longer connect since setup that way and they work fine.
 
  • Like
Reactions: Freubel
Why? Mine are blank on gateway (actually all my cameras are set with blank gateways and fixed ip addresses so cannot get access to internet, also I use a Ubiquity router with these blocked as well, but the logs tell me they no longer connect since setup that way and they work fine.

Depends on the cam. Some won't accept a blank entry. You can use the cam's own IP or some other non-working address.
 
Why? Mine are blank on gateway (actually all my cameras are set with blank gateways and fixed ip addresses so cannot get access to internet, also I use a Ubiquity router with these blocked as well, but the logs tell me they no longer connect since setup that way and they work fine.
I have 5 camera's in total, 2 hikvisions and 3 dahua's. 2 bought from andy and 1 from an unknown reseller. All 3 can not be left blank so i filled in a fake gateway.
 
  • Like
Reactions: sebastiantombs
Made great progress but till trying to understand all this. I'm somone who needs to understand something to understand it, if you know what I mean. Simply knowing do this doesn't help me a lot without the understanding.

Putting my thoughts in simple terms to also help others struggling with this.

The IP address is the "street address" of the computer. It tells other computers the exact street address of the computer ie the street and number "house" to go to.

The Sub Net Mask is the address of the Network so think the City "District Address" where the networks are collections of street addresses contained in District areas. So each distinct Network is can be thought of as a City District and the the Sub Net Mask tells you which District to go to to find the Street Address of the computer you're looking for.

But what is the Gateway? I thought it was like the City address where it identifies the City ie which collection of Networks ("Districts") to go to. However, it seems above some are suggesting it's the same as the Sub Net Mask in function ie a Network or "District Identifier" in which case what is it's function and why can it usually be left blank?

If you do fill out the Gateway Mask, does this prevent blank Gateway Masked computers from connecting ie is there such an equivolent thing as Dynamic IP Address handling where blank Gateway Masks are open to communicating with computers with fixed Gateway Masks or if it's blank does it have a hidden default value that any other computer must have in order to talk to it?

Or if blank is it simply open to talking to any other PC on the same Sub Net Mask with a blank Gateway but not any PC on the same Sub Net with a fixed Gateway Value?

Whats the value in filling out the Gateway Mask in dual NIC's as well as the subnet mask? Does it add another layer of refusal to a request?
 
  • Like
Reactions: bradner
It’s a gateway IP and not a mask.

In simple terms, the subnetwork mask is used to form a network or collection of devices that can all in theory see each other and talk to each other without the need for any extra hardware.

If a device needs to talk to another device which is outside of its network defined by its IP address and subnetwork mask then it will send that comms to the gateway, if a gateway ip has been configured.

The device in the gateway ip will most typically be a router that can route between networks, so acts like a relay/middle man to talk to the remote device.
 
The MAC address is the like physical address of a house. It's not changing. ( for this example anyway)
But if you want to call somebody at that address, you need a phone number.
The IP address is like the Phone # to your house.
However, you can change phone numbers and still be in the same house.
Just like you can change IP addresses of your PC but your MAC address stays the same.
 
In Flintstone61's example, the gateway address is the central office of the telephone system address. If that address is not the "real" address the device, computer/camera, can't connect to the "central office" to complete a phone call outside of it's own address, IP mask, range.
 
Thanks.

So this is my proposed set up in MS Paint (I've changed the IP's slightly for this image away from what I ill be using for extra security, but they're all ranged the same).

Will this setup work both as a set up and to stop camera Internet access?

NEW UPDATED AND CORRECTED DIAGRAM IN A POST BELOW.
 
Last edited:
  • Like
Reactions: Flintstone61
Yes that should work, 3 observations.

I set a static address on both NICs in the BI PC so that there’s no chance that they will change, I do this by still keeping the NIC on the home network side as DHCP but I add a reservation on the switch/router that serves the DHCP ip addresses.

I don’t set a gateway in the 2nd NIC in the BI PC.

Lastly, I think the IP subnet of the switch/router and bridge should be the same but I think this has occurred as you’ve attempted to hide the IPs you’ll use but there’s no need to do that as the vast majority of home networks will be on 192.168.0.0 or 192.168.1.0 etc
 
  • Like
Reactions: sebastiantombs
Yes that should work, 3 observations.

I set a static address on both NICs in the BI PC so that there’s no chance that they will change, I do this by still keeping the NIC on the home network side as DHCP but I add a reservation on the switch/router that serves the DHCP ip addresses.

Like this? Does this work? Are the IP's etc correct? (Asus Router):

(PS IP's are spoofed to match above diagram as is the MAC Address)

Reserved IP.jpg

I don’t set a gateway in the 2nd NIC in the BI PC.

I note some others do incl. the OP. Make any difference?

Lastly, I think the IP subnet of the switch/router and bridge should be the same but I think this has occurred as you’ve attempted to hide the IPs you’ll use but there’s no need to do that as the vast majority of home networks will be on 192.168.0.0 or 192.168.1.0 etc

Non CCTV Network is working fine.

The Modem is Bridged and connected to a Router / Switch combination AX82u Router.

I've looked through the settings and it appears it's configured to "get the WAN IP automatically". I presume this will mean the modem IP. Is this dangerous? Do I need to fix it?
 
I too have an asus router. in the router i keep my main (internet ) set to dchp. router address is 192.168.50.1. main computer (blue iris pc) nic ip is set to 192.168.50.150 (static) (mask: 255.255.255.0, length:24, gateway: (to the internet): 192.168.50.1

note: the internet comes into the house thru att modem . ip address of 192.168.1.254

all of my t.v.s go thru the att modem with 192.168.1.xx ip addresses assigned thru dchp by the att modem.

my computers to thru the asus router (which comes off a lan port of the att modem) with 192.168.50.xx ip adresses...some static some dchp

Separate nic for blue iris cameras.....ip set at (static) 10.10.10.36, gateway: (an indiscriminate/ meaningless #): 10.10.50.1. all cameras are set to static: 10.10.10.x
none of the cameras see the internet, as the 2nd nic does not see the internet. I observe the cameras remotely by using Zero Tier.
 

Attachments

  • Screenshot (3).png
    Screenshot (3).png
    255.2 KB · Views: 18
Last edited:
  • Like
Reactions: Flintstone61
I just made the diagram for reference. With 2 NIC's you can get by without V Lans and use an unmanaged switch if you want to. Of course people do a variety of things.
I have a 2 Ip addresses on my BI Machine at work. The internet for email is coming from Xfinity public Wifi,,,,,,on the wifi NIC @ 174.x.x.x or something, and the ethernet NIC is static @ 192.168.1.100. for the Camera Network.
 
So if you add cameras to that, put the switch in between the PC and the Router. Hook everything to the switch. except the Internet Providers device. That should be to the Router.