simple remote connectivity question

F

Frank@HOA

n3wb
Dec 12, 2024
10
4
San Fernando Calif.
i have been tasked with improving our 100 unit condo complex security camera system... i would like to log into the NVR and IP cameras themselves from my unit to tweek its settings!

The NVR is in a distant wiring closet with a Frontier Arris router and we pay for a static IP..

Interesting..I cannot log / web into the router via its WAN static IP... ( great fun learning networking!)

I can see the NVR settings thru the client app CMS.. but i'd like see/web into all the IP devices.. Ubiquity antennas and IP cams

In any case..how can i remote into its LAN side?

I have an extra Windows 7 laptop should i put in the closet on the same 192.168.254.0 network with some sort terminal service?
Or is there a tailor-made ethernet networking device instead?

whats best practice?

Thanks!

Frank A
 
Can you setup Open VPN on the network the NVR is on? Then you could install Open VPN on your laptop and do it that way. There’s a few more steps if you decide to go that route.
 
Many routers have OpenVPN native, such as Asus.

Or you can use Tailscale, Wireguard, or ZeroTier. Just don't use a paid VPN as that is a different kind of VPN that won't work for what you need to do.

OpenVPN is simple, but we make it way more difficult than it needs to be lol.

Just go to OpenVPN and enable it and see what it says - probably asks you to create a user/PW, DDNS name, encryption method, and create certificate. Then email that certificate to you and save the certificate on your mobile device. Then install the OpenVPN app and select the certificate and then connect and you are on that network just as if you were right there.

randyshomeprojects.blogspot.com

OpenVPN on a Asus router

Sept 2021 Turned off comments because of ads July 2021 Bought a new Asus router, an RT-AX86U. Loaded it right away with Merlin firmware, s...
randyshomeprojects.blogspot.com randyshomeprojects.blogspot.com
 
  • Like
Reactions: Valiant and camdensnyder
i dont see any VPN feature in this Arris NVG468MQ Frontier router.. would i have to have a Windows machine on its LAN to load OpenVPN ?

It does have a Remote GUI with username/password/port feature so thats sort of cool.. i can log into the router from home...

But i need to remotely be on its LAN side.. so i can web into cameras.. tweak their setting (getting motion blur at night).. from home.. from the public Internet !
 
As an Amazon Associate IPCamTalk earns from qualifying purchases.
  • Like
Reactions: johnfitz
I couldn’t agree more about getting an Asus router that already has the VPN built in. It saves a ton of frustration and headache. I know this by first hand experience unfortunately!
 
Frank@HOA said:
Interesting..I cannot log / web into the router via its WAN static IP..
Click to expand...
If you could, that would mean that there were open ports being forwarded to the NVR(s) (a terrible idea). Which would all but guarantee that the NVR would eventually be hacked.

The simplest option is the NVR(s) P2P Nat Traversal function, but while the risk is lower there's still a chance of the NVR being hacked (use a good password). If you can set up a different method of remote access like VPN that's a better but more difficult option.
 
I
tangent said:
If you could, that would mean that there were open ports being forwarded to the NVR(s) (a terrible idea). Which would all but guarantee that the NVR would eventually be hacked.

The simplest option is the NVR(s) P2P Nat Traversal function, but while the risk is lower there's still a chance of the NVR being hacked (use a good password). If you can set up a different method of remote access like VPN that's a better but more difficult option.
Click to expand...
I would disagree with Open VPN being difficult if you get an Asus router. You click the slider next to Open VPN on the routers web login page. Then download Open VPN on the remote device you want (phone, tablet, laptop). Connect that remote device to same WiFi as router. Go to internet and login to Asus router. Go to Open VPN, download the certificate. Login to Open VPN on remote device and upload the certificate you downloaded. That’s it!
 
Some have Wireguard instead of or as an option to OpenVPN, which is even easier and a faster connection.
Both work the same way and are very simple to use
 
  • Like
Reactions: Valiant
camdensnyder said:
I would disagree with Open VPN being difficult if you get an Asus router.
Click to expand...
As I said, it's more difficult than P2P but more secure. Difficulty is relative, the OP didn't come across as the most tech savvy.

There are other options too like tailscale or zerotier running on something like a raspberry pi. What band are the cameras?
 
  • Like
Reactions: camdensnyder and Valiant
IP Networking.. this is fairly high end technology! make me want just run a loooong cat5 cable to my unit!

"What band are the cameras?" ...well , 3 cameras are hardwired to the NVR and the other cameras are connected to the NVR thru Ubiquity wireless bridge/antennas.. so their not wireless.
"P2P Nat Traversal function" I do not see this in the NVR configuration web pages.

Can i "port-forward" the cameras IP addresses of the ones i want to adjust ? i simply want to web into those devices (from home) , try settings and then see how footage improves..

my idea of putting a laptop on the LAN ... then Terminal into it from the public internet?

Thanks!

(i sure this is a common need and the correct way is a VPN)

.
 
one of the Ubquity antennas ( and a security camera) ..is nearby.. ( antenna pointed to the NVR closet )... can i wirelessly jump on the LAN somehow thru this ? or is it a tight point-to-point system?
 
1734072972464.png
 
Some NVR companies have an accompanying " windows" software that will go into the NVR to remote view.
PSS Lite is for Dahua and thier OEM's
Nightowl has a few depending on device.
HIkvision and thier OEm's use something else. like IVS4200
Port forwarding maybe a one day solution. it opens you up to security risks ( so i'm told)
 
Frank@HOA said:
one of the Ubquity antennas ( and a security camera) ..is nearby.. ( antenna pointed to the NVR closet )... can i wirelessly jump on the LAN somehow thru this ? or is it a tight point-to-point system?
Click to expand...
For optimum speed, throughput and reliability the 2 Ubiquiti radios should be linked with their propriety protocol. They use Airmax, WDS and usually a channel width that is not compatible with typical "standard" Wi-Fi receivers of smartphones, laptops, etc.

They could be re-configured so that your device could likely connect to the access point side of the pair BUT the PtP link quality would suffer and therefore it's not a good idea.
 
Last edited:
really appreciate all input here , learning as i go..

in thinking of BI or IVS4200.. seems running this software on my (public internet) PC.. still wo'nt get me where i want to be right? I assume i still would not be able browse the Frontier router LAN side from home thru these programs?

Open VPN or WireGuard.. from the public internet, this creates a secure tunnel to the WAN (static IP) side of router.? Where can i install this software? (the Arris router wo'nt)
I keep going back to thinking i need a PC in that NVR closet

Is there not a simple networking device i can Cat5 plug into the router.. which then is reachable (and secure) over the Internet? which can then browse the LAN side of the router?

or do i need a new proper VPN router?

Goal is to web into all the devices.. the NVR.. Ubiquiti devices and the 11 IP Cameras.. remotely!
 
As an Amazon Associate IPCamTalk earns from qualifying purchases.
  • Like
Reactions: camdensnyder
If all of the things you want to connect to are on the same LAN then the vpn on the router is the simplest, easiest, and cheapest
 
+1 above.

Cheap router with OpenVPN will be the quickest and easiest fix.

If you put a computer in there, then you have to set that up to be the VPN host and what not and while doable, it adds more complexity.

Or you port forward the $#!+ out of the router and bridge the NVR POE ports with the same IP of the router and open yourself up to all sorts of issues, further complicated with your ubiquity devices.

Get the router with OpenVPN and then it is just like you took a laptop and connected it to the NVR.
 
  • Like
Reactions: camdensnyder
You must log in or register to reply here.
Top Bottom