Port forward Hikvision camera through Huawei B618

Forums › Spark New Zealand › Port forward Hikvision camera through Huawei B618

MrAmerica

30 posts

Geek
+1 received by user: 2

Topic # 240084 20-Aug-2018 07:03

After advising a mate to get a Wireless BB connection it appears I am now his tech support :(

He has a Hikvision camera and a Huawei B618. He wants to be able to view the camera remotely.

I got the camera going on the weekend over the LAN, set up a dynamic DNS for the modem.

Camera is set to 192.168.8.199 port 8000 (modem gateway 192.168.8.1)

Googling the subject it appears I need to open the firewall to allow the virtual server to work? Can anyone tell me if this is the case, and what the virtual server settings should look like with the above settings.

Also can he view the camera without using the awful Hikvsion software or app?

Problem is made more difficult in that he lives an hour from me so I am limited to helping on the weekend when I can get up there.

sbiddle

26936 posts

Uber Geek
+1 received by user: 6379

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 2075976 20-Aug-2018 07:17

7 people support this post

First off you should never ever under any circumstances port forward to CCTV equipment. If you need remote access it should be via VPN.

Secondly since you're on a wireless connection there is a very high likelihood you are only a CG-NAT connection, so don't have a public IP. Because of this you can't port forward anyway.

You can now get a public IP with Spark, so would need to that for a start. You would then need to look at hardware that will allow to you terminate a VPN. As you can't replace the Spark router you'll need to find something that sits behind it.

sbiddle

26936 posts

Uber Geek
+1 received by user: 6379

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 2075977 20-Aug-2018 07:21

2 people support this post

Here's my post explaining why you should never port forward. https://www.geekzone.co.nz/sbiddle/8941

Since I wrote that there have been plenty more massive DDoS attacks where CCTV gear (particularly Hikvision) has been used as the vector.

MrAmerica

30 posts

Geek
+1 received by user: 2

Reply # 2075989 20-Aug-2018 08:39

That has probably exceeded my level of competence, its definitely exceeded my level of enthusiasm.

Another option to monitor his building could be snapshot on movement, I assume this could be done without the need for VPN just using some sort email client (I will have a look at what the Hikvision software can do)

Thanks very much for your advice.

sbiddle

26936 posts

Uber Geek
+1 received by user: 6379

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 2075992 20-Aug-2018 08:49

You can email a snapshot on movement from the camera itself but this is a very poor solution and will be triggered by all sorts of things.

If you want snapshots of people and/or objects only I would recommend a local PC running Sighthound for video processing to send out push notifications or emails.

MrAmerica

30 posts

Geek
+1 received by user: 2

Reply # 2076006 20-Aug-2018 09:14

Great thanks, I will check that out. I have a NUC I dont use so he can use that with sighthound.

MrAmerica

30 posts

Geek
+1 received by user: 2

Reply # 2076082 20-Aug-2018 10:45

sbiddle:
You can email a snapshot on movement from the camera itself but this is a very poor solution and will be triggered by all sorts of things.

If you want snapshots of people and/or objects only I would recommend a local PC running Sighthound for video processing to send out push notifications or emails.

Thanks very much for pointing me at Sighthound. Its perfect for the application, plus I can use it elsewhere as well.

Very much appreciated.

hio77

'That VDSL Cat'
8446 posts

Uber Geek
+1 received by user: 1816

Trusted

Spark

Subscriber

Reply # 2076087 20-Aug-2018 10:49

One person supports this post

Steve is absolutely right in regards to publicly opening up a channel to the internet

i have not seen mention of it as of yet, so probably worth noting.

Do you have a static ip on this connection? otherwise you will be behind CGNAT.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Mattmannz

443 posts

Ultimate Geek
+1 received by user: 83

Reply # 2076116 20-Aug-2018 11:28

I have a Hikvision setup and can use the app with a Hikvision account and there is no need to port forward.

michaelmurfy

Meow
7787 posts

Uber Geek
+1 received by user: 3847

Moderator

Trusted

Lifetime subscriber

Reply # 2076174 20-Aug-2018 12:40

One person supports this post

Mattmannz:

I have a Hikvision setup and can use the app with a Hikvision account and there is no need to port forward.

That is likely via UPnP on your router which will be doing the port forward for you.

Michael Murphy | https://murfy.nz
A quick guide to picking the right ISP | The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial

sbiddle

26936 posts

Uber Geek
+1 received by user: 6379

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 2076237 20-Aug-2018 14:12

michaelmurfy:

Mattmannz:

I have a Hikvision setup and can use the app with a Hikvision account and there is no need to port forward.

That is likely via UPnP on your router which will be doing the port forward for you.

I don't use Hikvision gear but it's poetntially like Dahua's Easy4IP which relies on tunneled traffic so doesn't need UPnP or port forwards.

Mattmannz

443 posts

Ultimate Geek
+1 received by user: 83

Reply # 2076616 21-Aug-2018 09:47

michaelmurfy:

Mattmannz:

I have a Hikvision setup and can use the app with a Hikvision account and there is no need to port forward.

That is likely via UPnP on your router which will be doing the port forward for you.

Nope I have UPNP disabled so it's definitely not that, it's done via the Hikvision account.

sparkz25

219 posts

Master Geek
+1 received by user: 50

Reply # 2086153 8-Sep-2018 16:45

hik connect is the app you want for your phone, and you need to setup platform access within the NVR i have the doco from atlas gentech on how to set it all up

tdgeek

13228 posts

Uber Geek
+1 received by user: 2372

Trusted

Reply # 2086155 8-Sep-2018 17:36

Get a static ip, that gets you onto the fixed line network config (for static ip purposes) and off CG-NAT. You can then treat this like copper or fibre, not mobile

If @sbiddle got paid for every port forwarding for cameras post, his address will be in Hawaii...