↓ Advertise on Defender2 ↓

Home > Off Topic > Remote access (via mobile) for CCTV via Vodafone 4G router
Post Reply  Down to end
Page 1 of 2 12>
Print this entire topic · 
diesel_jim



Member Since: 13 Oct 2008
Location: hiding
Posts: 6092

United Kingdom 2006 Defender 110 Td5 SW Epsom Green
Remote access (via mobile) for CCTV via Vodafone 4G router
Wonder if anyone has any knowledge on this one.

Part of my day job is installing CCTV. no problem using the phone apps for remote viewing if you (or the site) has normal internet access, but I did a job the other week on a remote farm.

The chap bought a router with 4G sim card (a vodafone data only, 20GB per month so plenty of data allowance)

Now to view the CCTV as you know requires port forwarding etc. opened the ports on the router AOK but apparently via vodafone there is an "issue" remotely accessing the router.

The internet 4G connection has static IP, but I just cannot access it from anywhere else.

spoke to half of India when ringing vodafone, eventually got through to a European chap who spoke good english and understood what port forwarding was but he said there are no restrictions on Voda's 4G network.

There must just be some simple thing I'm missing but can't put my finger on it.

The DVR uses IPpostcode to get around any dynamic IP (although with static IP I shouldn't really need to use the IPpostcode system, merely jusyt log in using the static IP, but it no workey)

anyone got any ideas?

Cheers
Post #696314 26th Mar 2018 6:46pm
View user's profile Send private message View poster's gallery Reply with quote
jrule



Member Since: 10 Aug 2015
Location: Hertfordshire
Posts: 302

United Kingdom 2000 Defender 90 Td5 CSW Oslo Blue
If you can set up so the CCTV is viewed via cloud p2p it might be easier. I found via port forwarding always seemed to drop connections. I have hikvision dvr and works seemlessly via this route.

I’m not a pro so other maybe able to help with the port forwarding route
Post #696328 26th Mar 2018 7:27pm
View user's profile Send private message View poster's gallery Reply with quote
davew



Member Since: 02 Jan 2012
Location: North Yorkshire
Posts: 888

England 1990 Defender 90 V8 Petrol PU Auto Rioja Red
Not familiar with this particular router but I guess I can throw some ideas out in case there's something you've not tried...

I'd start by trying to identify where the actual issue is as you effectively have 4 different points of failure, each of which could have 1 of several issues. Simplest way to do that is often to rule out what you can.

Working backwards, the CCTV presumably uses "special" ports so have you tried connecting a simple web server to the network and forwarding port 80 ? That way you can rule out/in any issue specific to the ports being used.

Does the machine hosting the CCTV service have a firewall and is that set to allow connections from IP ranges outside the local ones ? (I'm assuming you can access the service internally)

Can the machine hosting the CCTV service access the internet ? A bad configuration or internal firewall/"child safety" feature may block this. If so, check that it can open a connection using the custom port(s).

Some routers have a DMZ option as well as port forwarding and often that will overwrite port forwarding. Make sure that's not the case and, if not, try using DMZ for the CCTV instead of port forwarding. It's not really safe to do so permanently but a good way to test the router.

The router may have a firewall configuration that conflicts with the port forwarding, if possible disable it as a temporary measure and see what happens.

If the router has the ability to respond to ICMP on the WAN port (ping and trace route) turn that on and see what happens when you try a traceroute to the WAN IP address.

It's always worth trying traceroute with your custom port number(s) from the remote terminal too as that may give you a clue where it's breaking down. Some ISPs/carriers are good at blocking ports they deem as insecure without telling you and trace route may reveal if the is the case if your packet isn't making it as far as the router. http://www.yorkshireoffroadclub.net/
Post #696337 26th Mar 2018 7:58pm
View user's profile Send private message View poster's gallery Reply with quote
mick



Member Since: 08 Feb 2010
Location: Yorkshire
Posts: 2109

England 2010 Defender 130 Puma 2.4 HCPU Rimini Red
I’ve asked a pal whose asking his nerdy mate that fit cables and cameras etc
Post #696340 26th Mar 2018 8:02pm
View user's profile Send private message View poster's gallery Reply with quote
mick



Member Since: 08 Feb 2010
Location: Yorkshire
Posts: 2109

England 2010 Defender 130 Puma 2.4 HCPU Rimini Red
davew wrote:
Not familiar with this particular router but I guess I can throw some ideas out in case there's something you've not tried...

I'd start by trying to identify where the actual issue is as you effectively have 4 different points of failure, each of which could have 1 of several issues. Simplest way to do that is often to rule out what you can.

Working backwards, the CCTV presumably uses "special" ports so have you tried connecting a simple web server to the network and forwarding port 80 ? That way you can rule out/in any issue specific to the ports being used.

Does the machine hosting the CCTV service have a firewall and is that set to allow connections from IP ranges outside the local ones ? (I'm assuming you can access the service internally)

Can the machine hosting the CCTV service access the internet ? A bad configuration or internal firewall/"child safety" feature may block this. If so, check that it can open a connection using the custom port(s).

Some routers have a DMZ option as well as port forwarding and often that will overwrite port forwarding. Make sure that's not the case and, if not, try using DMZ for the CCTV instead of port forwarding. It's not really safe to do so permanently but a good way to test the router.

The router may have a firewall configuration that conflicts with the port forwarding, if possible disable it as a temporary measure and see what happens.

If the router has the ability to respond to ICMP on the WAN port (ping and trace route) turn that on and see what happens when you try a traceroute to the WAN IP address.

It's always worth trying traceroute with your custom port number(s) from the remote terminal too as that may give you a clue where it's breaking down. Some ISPs/carriers are good at blocking ports they deem as insecure without telling you and trace route may reveal if the is the case if your packet isn't making it as far as the router.
Bow down Bow down

I’m so glad I only have to deal with horses Thumbs Up
Post #696341 26th Mar 2018 8:04pm
View user's profile Send private message View poster's gallery Reply with quote
mick



Member Since: 08 Feb 2010
Location: Yorkshire
Posts: 2109

England 2010 Defender 130 Puma 2.4 HCPU Rimini Red

Click image to enlarge
Post #696349 26th Mar 2018 8:30pm
View user's profile Send private message View poster's gallery Reply with quote
jrule



Member Since: 10 Aug 2015
Location: Hertfordshire
Posts: 302

United Kingdom 2000 Defender 90 Td5 CSW Oslo Blue
What dvr are you using?
Post #696363 26th Mar 2018 9:23pm
View user's profile Send private message View poster's gallery Reply with quote
miker



Member Since: 13 Sep 2015
Location: Surrey
Posts: 1763

United Kingdom 1999 Defender 110 Td5 CSW Rioja Red
Whatever the tech support says, port forwarding is a massive ballache on a 4g modem as they do strange things with proxying and port forwarding, and don't admit to it!!

Maybe worth setting up an rtsp stream from the modem, so it's pushing it out?

Alternatively, the hikvision kit has its own dynamic IP service that seems to do a good job tunneling through most things!
Post #696366 26th Mar 2018 10:15pm
View user's profile Send private message View poster's gallery Reply with quote
diesel_jim



Member Since: 13 Oct 2008
Location: hiding
Posts: 6092

United Kingdom 2006 Defender 110 Td5 SW Epsom Green
Thanks all.

I've tried a lot of the suggestions above:

(in no particular order)....

make is Alien DVR from SystemQ. I've installed dozens of these ones so know their OS fairly well. They come pre installed a dynamic IP type of thing (IPpostcode they call it), where you setup via systemQ's own server with your dynamic IP addres and they give you a fixed login address (in the form of machine-serial-number.ippostcode.com) and this enables you to get around not having a static IP

On sites where they have static IP (and this 4G router also does) you can usually just log in with the IP address no problem (apart from this 4G one)

The DVR box uses ports 80, 1240 and 8240 as factory settings, but you can easily change them. I've tried 8080 instead of 80 as sometimes 80 clashes (and numerous other combinations as well) but they all come back as "closed" when trying a port checking site.

It's as if (which I think it is) vodafone don't allow access back up to the router via their network

OUtbound internet access is fine. Plug my laptop in and surf away. the DVR also has outbound access as I've setup an alarm for an internal camera that sends 3x pictures out if it's activated. this works just fine.

Quote:
Does the machine hosting the CCTV service have a firewall and is that set to allow connections from IP ranges outside the local ones ? (I'm assuming you can access the service internally)


I've not looked at this one. ^^ I don't think they're (this make) usually set to block anything, but I'll check again when I visit the site this week.


Quote:
Some routers have a DMZ option as well as port forwarding and often that will overwrite port forwarding. Make sure that's not the case and, if not, try using DMZ for the CCTV instead of port forwarding. It's not really safe to do so permanently but a good way to test the router.


Yes this router has DMZ settings but I've not really used them in the past, so it's a bit of a learning curve for me... care to give me a quick run down? Whistle Thumbs Up



@ Mick... I think your friends nerdy mate is on the ball with that one. I've read a lot of forums on the web and they all seem to point to services being proxied, eventhough when I spoke to a vodafone tech person they denied this.

Funnily enough we use some data only SIM cards at work on fruit machine OLGA data units, and I spoke with the supplier of those SIM's... they can supply a totally access free card but it's approx 4x the price of the voda one Rolling Eyes
Post #696386 27th Mar 2018 6:35am
View user's profile Send private message View poster's gallery Reply with quote
mse



Member Since: 06 Apr 2008
Location: UK
Posts: 5035

United Kingdom 2016 Defender 110 Puma 2.2 XS CSW Scotia Grey
Does the router have different protocols for 4g?

Vodafone 4g doesn’t stop any of my remote access Mike
Post #697073 29th Mar 2018 9:01pm
View user's profile Send private message View poster's gallery Reply with quote
diesel_jim



Member Since: 13 Oct 2008
Location: hiding
Posts: 6092

United Kingdom 2006 Defender 110 Td5 SW Epsom Green
^^^ AFAIK it doesn't have anything different for 4G, not that I can see anyway.

I went to the site and had another play today, to no avail. Took an O2 SIM card out of one of our work machines that uses a 4G data transmitter, to see of that would help, but it didn't (although as I got about an hour away from the site I remembered that I /may/ not have re-setup the IPpostcode thing for the new SIM which may/may not have made any difference.

MSE... can I ask how you set yours up? How do you remote access it? straight to the IP or using another protocol?
Post #697081 29th Mar 2018 9:20pm
View user's profile Send private message View poster's gallery Reply with quote
davew



Member Since: 02 Jan 2012
Location: North Yorkshire
Posts: 888

England 1990 Defender 90 V8 Petrol PU Auto Rioja Red
diesel_jim wrote:
Thanks all.

Quote:
Some routers have a DMZ option as well as port forwarding and often that will overwrite port forwarding. Make sure that's not the case and, if not, try using DMZ for the CCTV instead of port forwarding. It's not really safe to do so permanently but a good way to test the router.


Yes this router has DMZ settings but I've not really used them in the past, so it's a bit of a learning curve for me... care to give me a quick run down? Whistle Thumbs Up



DMZ is not normally used but is the routing equivalent of connecting the target machine directly to the internet/WAN. Instead of forwarding individual ports it effectively routes all IP traffic coming from the WAN to the target machine regardless of port. If it's already configured on the router to point at another device then your port forwarding will be ignored/overwritten in most routers.
By the same token if it's not already configured, if you configure it to point at your CCTV device it may work where port forwarding doesn't although it's not something you want to leave configured like that !

Many service providers do filter out traffic on what they deem high risk ports, I'd be very surprised if they're filtering out port 80 though.

Did you try running traceroute ? http://www.yorkshireoffroadclub.net/
Post #697093 29th Mar 2018 10:03pm
View user's profile Send private message View poster's gallery Reply with quote
diesel_jim



Member Since: 13 Oct 2008
Location: hiding
Posts: 6092

United Kingdom 2006 Defender 110 Td5 SW Epsom Green
I tried DMZ yesterday which didn't work either (although at that time I hadn't reset the IPpostcode thing which I think will be IP specific... Rolling Eyes ) So I'll try and get back there today and have another stab.


I've not run traceroute, not really sure how it works so the results from it would be a bit meaningless to me.
Post #697116 30th Mar 2018 7:33am
View user's profile Send private message View poster's gallery Reply with quote
davew



Member Since: 02 Jan 2012
Location: North Yorkshire
Posts: 888

England 1990 Defender 90 V8 Petrol PU Auto Rioja Red
traceroute gives you a list of devices/routers that the packets pass through together with the time it takes. It means you can send a packet on a specific port and see where it stops if it's not working as the routers are listed in the order they are encountered.

As an example, if I run a traceroute on defender2.net from here you can see my outgoing router is at 192.168.0.1 and there i some delay (three * characters) in opening a connection from my ISP's router (zen.net.uk) to their outgoing router before it heads through as29550.net before reaching it's destination at the server that runs this forum - server1.web-rover.co.uk

traceroute to www.defender2.net (94.76.204.86), 64 hops max, 52 byte packets
 1  192.168.0.1 (192.168.0.1)  0.863 ms  0.559 ms  0.453 ms
 2  vt1.cor2.lond1.ptn.zen.net.uk (51.148.72.22)  12.465 ms  12.750 ms  12.504 ms
 3  * * *
 4  51-148-73-55.dsl.zen.co.uk (51.148.73.55)  13.187 ms  15.807 ms  12.481 ms
 5  ld5-linx.as29550.net (195.66.236.223)  13.706 ms  14.037 ms  13.476 ms
 6  ae1-cr1.rdg.as29550.net (91.186.5.241)  13.957 ms  14.965 ms  14.347 ms
 7  b.3.magic-hex.as29550.net (92.48.95.62)  15.685 ms  14.932 ms  14.459 ms
 8  server1.web-rover.co.uk (94.76.204.86)  15.796 ms  14.581 ms  15.557 ms



If you run something similar to connect to your CCTV device it may well show where the connection is breaking down (if it is). http://www.yorkshireoffroadclub.net/
Post #697204 30th Mar 2018 1:02pm
View user's profile Send private message View poster's gallery Reply with quote
diesel_jim



Member Since: 13 Oct 2008
Location: hiding
Posts: 6092

United Kingdom 2006 Defender 110 Td5 SW Epsom Green
Ah cool. I'll do a little research and try it out.

I just tried it here, got (understandably) different results to you up until the trace left my LAN and hit the wide world, then from your #6 mine was almost identical.

So I'm assuming if I were on an outside network from this router I have, and do a traceroute to it (it has a static IP) then I may find a/the block?
Post #697249 30th Mar 2018 4:45pm
View user's profile Send private message View poster's gallery Reply with quote
Post Reply  Back to top
Page 1 of 2 12>
All times are GMT

Jump to  
Previous Topic | Next Topic >
Posting Rules
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



Site Copyright © 2006-2024 Futuranet Ltd & Martin Lewis
DEFENDER2.NET RSS Feed - All Forums