HIKVision displays router login page instead of DVR view page

[RedAnt]

Hi everyone. I'm a n3wb to the forum and hope someone can help me with an issue or point me in the right direction.

I bought a new system for home security and now I'm pretty much stuck.

I have a windows phone and since using HiDDNS is the only way for me to be able to view my cameras remotely, I need to set it up as accessing the DVR via the EZVIZ cloud does not work due to the phone not being able to render the video. Not sure what protocol the phone doesn't like.

I have set the parameters as per the manual and registered on HiDDNS. However, when I attempt to access the DVR from the Internet, I am presented with the router’s login page and I suspect a certificate issue.

I have set the port mapping correctly and testing with canyouseeme.org shows that all the ports are accessible.

The DSL router is a TELKOM Home Gateway Hauwei HG532f ( South Africa )

The DVR is a HIKVision model DS-7108HGHI-E1

I can access the DVR landing page on the local network and everything else works - its just that I cant get past the router login page from external.

Has anyone else had this issue and if so could you please tell me how to resolve it. Thanks!

 

[pozzello]

what port do you have your DVR listening on? Did you configure port forwarding in your router? So that when you browse to your
external IPort from the internet, your router knows to forward that traffic to your DVR. It sounds like your router is allowing
access to it's configuration interface from the outside, which is very unsafe. Turn that off and make sure your DVR is on a different
port than your router's admin interface.

 

[RedAnt]

Hi pozzello

Yes,I have port forwarding set up as follows (all for testing at this point - once I have it working I will harden security.)

http - external 80 -> internal 8080
rstp - 554 -> 554
sdk - 8000 -> 8000
https - 8443 -> 8443

on the DVR:
http -> 8080
rtsp -> 554
https -> 8443
server -> 8000

On DDNS:
Device local port -> 8080
Platform effective port -> 80

 

[alastairstevenson]

I believe @pozzello will be correct here - heed his warning or you will likely get hacked. Many routers are vulnerable. The setting will be in the router 'Allow device admin on WAN interface' or similar.

It sounds like your router is allowing
access to it's configuration interface from the outside, which is very unsafe.

 

[RedAnt]

Thanks Alistair

That's part of the issue I'm afraid but I want to solve one problem at a time so I'm focussing on access first. The router has been flashed with proprietary firmware by the telecom company and I cannot see any setting for disallowing WAN interface access.

 

[pozzello]

"http - external 80 -> internal 8080".

perhaps your router's login page insists on using port 80, so you can't use that for forwarding?
try another port for the external connections (eg, why not 8080 outside -> 8080 inside or somesuch).

 

[RedAnt]

@pozzello - tried that. I then just get a timeout. So when I connect to the url via the HiDDNS generated address ( http://eu.hik-online.com/<my domain> ) it changes the url in the address bar to ( https://<Extenal facing IP of my router> ) and presents me with the DSL router login page. It seem to me this is a NATting rather than a routing issue perhaps ...