Help with nvr p2p device offline.

Discussion in 'Networking' started by dudemaar, Jun 18, 2019.

Share This Page

  1. dudemaar

    dudemaar Getting the hang of it

    Joined:
    Aug 18, 2018
    Messages:
    114
    Likes Received:
    84
    Location:
    canada
    Im having problems at my brothers place, who lives out in the country and has internet via wireless bridge AP on his roof connected to a good Asus router in his office .
    I installed a Dahua NVR system awhile back and just can’t seem to get the p2p on the idmss app to connect. It says device is offline but in the Nvr under network easy4ip it says online. I can access cameras on the app via lan ip/domain.

    I’ve installed many of these systems and never had this issue yet. Hoping someone can help me out. I’m thinking it may be the Outdoor AP from the Internet company blocking it? Also The Ring Alarm system notifications work fine when they are not home.
     
  2. TonyR

    TonyR IPCT Contributor

    Joined:
    Jul 15, 2014
    Messages:
    4,008
    Likes Received:
    3,849
    Location:
    Alabama
    Has it been working and recently stopped?

    Are any of those that DO work on the same ISP with same wireless method?

    Is this cellular wireless deploying carrier-grade NAT?
     
  3. Valiant

    Valiant Getting the hang of it

    Joined:
    Oct 30, 2017
    Messages:
    164
    Likes Received:
    64
    Location:
    Australia
    Can you supply a network diagram showing the subnets and IP address ranges ?, It is not clear how the NVR connects to the office, Is that via another private wireless link (bridge) between yourselves ?
     
    TonyR likes this.
  4. dudemaar

    dudemaar Getting the hang of it

    Joined:
    Aug 18, 2018
    Messages:
    114
    Likes Received:
    84
    Location:
    canada
    Tony it has never worked yet.

    We purchased a new router because old one wifi wasn’t that good. But the new asus router gave me a address of 192.168.50.???

    I know nothing of this internet provider called silo. It’s a AP unit outside pointing into the sky. And a wire coming into house which goes into what looks like a poe injector/adapter then into our new asus router.
     
    Last edited: Jun 19, 2019
  5. TonyR

    TonyR IPCT Contributor

    Joined:
    Jul 15, 2014
    Messages:
    4,008
    Likes Received:
    3,849
    Location:
    Alabama
    From the support page of your ISP, Silo, here:

    "INTERNET FAQ's

    Q: Can I access my internal network from outside my home?
    A: No. In order to access your internal network or computers from outside of your home you will need a static IP address. If you require one of these please contact our technical support team. The cost for a static IP address is $10/month +tax

    Q: Can I use VPN services with Silo Internet?
    A: Yes. In most cases, VPN services will work normally but in some circumstances certain settings may need to be tweaked. Please call our tech support team if you have problems connecting over VPN."
     
    dudemaar likes this.
  6. wuhanspaceprogram

    wuhanspaceprogram n3wb

    Joined:
    Jun 29, 2019
    Messages:
    14
    Likes Received:
    5
    Location:
    New Zealand
    Dahua P2P doesn't require a static IP address. I've had a bit of trouble with P2P lately, same as you describe. Device says P2P is enabled and online, but only some devices can connect, others can't. A reset of the device has sorted it out thus far, but it is annoying. Try restarting the NVR and see if the problem persists.
     
  7. TonyR

    TonyR IPCT Contributor

    Joined:
    Jul 15, 2014
    Messages:
    4,008
    Likes Received:
    3,849
    Location:
    Alabama
    It seems his ISP does not provide a public IP unless a static IP is requested from them and being not "public" prevents his remote access in this instance.
     
    Valiant likes this.
  8. dudemaar

    dudemaar Getting the hang of it

    Joined:
    Aug 18, 2018
    Messages:
    114
    Likes Received:
    84
    Location:
    canada
    I have yet to go over there and call silo tech support. But I do know the ring alarm system I installed works on there phones when they are away. It’s just when they get a ring alarm notifications they can’t see who is there on the idmss app.
     
  9. catcamstar

    catcamstar Getting comfortable

    Joined:
    Jan 28, 2018
    Messages:
    959
    Likes Received:
    582
    I assume ring is simply "relaying" on their cloud services to get the push notification to you.

    A "simple" way to verify if your ISP is actually trying to sell you that static IP or just not wanting to help you out:
    step 1: go to What Is My IP? Shows your real public IP address - IPv4 - IPv6 ->> note down the IP address you see
    step 2: go to your asus webinterface (I assume 192.168.50.1)
    step 3: go to first topleft menu: network map: look at the interfaces: you should see the 192.168.50.x range as "LAN", but what is of interest is the WAN side: is that the same or different as in step 1?

    If yes, then your ISP gives you a "direct" WAN IP address. It might change over night (as it will be provided through DHCP). If it's not, you are effectively "forced" to "buy" a WAN IP address.

    But then again, I would not recommend using the P2P connectivity. As you probably had to enable UPNP to "configure" that p2p, it lowers (or better said: undermines) your networking security. For push notifications to work (on NVR/IPC), you only need a working outbound TCP2195 connectivity. That's it. Nothing more, nothing less. To actually view footage from "outside", you need to connect to you LAN first and then hook up the video feeds. In other words, if in step 3 you have a "publicly" accessible WAN IP, you simply deploy OpenVPN on your ASUS router, you connect with the OpenVPN client app to your router and iDMSS works like it currently works on your local LAN (ip/domain).

    At least you can than turn off p2p, uupnp and all those other "phone home" systems.

    Hope this helps!
    CC
     
    dudemaar likes this.
  10. TonyR

    TonyR IPCT Contributor

    Joined:
    Jul 15, 2014
    Messages:
    4,008
    Likes Received:
    3,849
    Location:
    Alabama
    OUTGOING e-mails and push notifications will work, even with no public IP (WAN), even in carrier-grade NAT (like most cellular wireless ISPs); it's the INCOMING traffic that is prevented by not having a public IP.
     
    dudemaar likes this.
  11. wuhanspaceprogram

    wuhanspaceprogram n3wb

    Joined:
    Jun 29, 2019
    Messages:
    14
    Likes Received:
    5
    Location:
    New Zealand
    Oh wow. Never heard of that before! I this common in the US?
     
  12. TonyR

    TonyR IPCT Contributor

    Joined:
    Jul 15, 2014
    Messages:
    4,008
    Likes Received:
    3,849
    Location:
    Alabama
    Yes, but mostly with cellular wireless ISPs employing carrier-grade NAT, to my knowledge not so much among ISPs employing cable (DOCSIS), fiber and ADSL.
     
  13. wuhanspaceprogram

    wuhanspaceprogram n3wb

    Joined:
    Jun 29, 2019
    Messages:
    14
    Likes Received:
    5
    Location:
    New Zealand
    Right. I guess I should consider myself lucky then! I'm in New Zealand, and using a wireless ISP. They give each customer a static public IP as standard.
     
    TonyR likes this.