Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




482 posts

Ultimate Geek
+1 received by user: 5


Topic # 216702 9-Jul-2017 12:11
Send private message quote this post

I am looking to setup a remote IP camera in an area with no phoneline but strong 34/4g connectivity and electrical power.

 

I had planned to use an outdoor wireless IP camera connected via wifi to a router with a 3g/4g data stick in it and a vodafone sim (i have one additional data only sim on my current vodafone plan).

 

However, some research seems to indicate that the old direct APN no longer works on 3g and that its also not possible to directly access a device on 4g? Has anyone got a setup similar to this and a good way to remotely access the device - preferably through vodafone but open to other providers also.

 

 

 

Thanks

 

 

 

 





pɐǝɥ sıɥ uo ƃuıpuɐʇs

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
6550 posts

Uber Geek
+1 received by user: 2968

Moderator
Trusted
Subscriber

  Reply # 1817192 9-Jul-2017 12:14
7 people support this post
Send private message quote this post

Don't do this.

 

Cameras especially are often targets to malware and the last thing you want is having become a part of a botnet and doing a DDOS over a mobile network. Have it upload files to a remote web server or set up a VPN.





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router Guide | Electric KiwiCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


3072 posts

Uber Geek
+1 received by user: 503

Trusted

  Reply # 1817198 9-Jul-2017 12:34
One person supports this post
Send private message quote this post

I cant agree more.

 

Google Mirai Botnet for more info - it specifically targets devices such as internet connected cameras.

 

Never, Ever make a port forward to a security camera or DVR recorder





Ray Taylor
Taylor Broadband (rural hawkes bay)
www.ruralkiwi.com

There is no place like localhost
For my general guide to extending your wireless network Click Here




 
 
 
 


BDFL - Memuneh
58769 posts

Uber Geek
+1 received by user: 10169

Administrator
Trusted
Geekzone
Subscriber

  Reply # 1817199 9-Jul-2017 12:36
2 people support this post
Send private message quote this post
4378 posts

Uber Geek
+1 received by user: 1231


  Reply # 1817204 9-Jul-2017 12:56
Send private message quote this post

The OP hasn't actually said how they intend to configure this, just that a routable IP is required for access. This doesn't mean that the camera itself is either going to have a public IP, or have public facing ports. If the router is running a properly configured VPN server which is used to get access to the camera, then this should be sufficiently secure.

 

I can't answer the question about what (if any) APN will provide the required service, but lets not jump to conclusions (yet!) about how the OP intends to configure the setup.


BDFL - Memuneh
58769 posts

Uber Geek
+1 received by user: 10169

Administrator
Trusted
Geekzone
Subscriber

  Reply # 1817206 9-Jul-2017 12:58
2 people support this post
Send private message quote this post

Good point, we should know more. But preempting anything of the sorts, "port forward to a camera" is always a bad solution.







482 posts

Ultimate Geek
+1 received by user: 5


  Reply # 1817211 9-Jul-2017 13:05
2 people support this post
Send private message quote this post

RunningMan:

 

The OP hasn't actually said how they intend to configure this, just that a routable IP is required for access. This doesn't mean that the camera itself is either going to have a public IP, or have public facing ports. If the router is running a properly configured VPN server which is used to get access to the camera, then this should be sufficiently secure.

 

 

 

 

Wow that was a barrage! Yes... I am in the infosec business - so know what I am doing - simplified my setup for the purposes of the question though... lesson learnt! Although you have perhaps given me an idea to see if i can get the router to VPN back to me rather than the other way around.. downside is increased traffic in keeping the VPN alive 24x7 but it shouldn't be too many bytes.





pɐǝɥ sıɥ uo ƃuıpuɐʇs

4378 posts

Uber Geek
+1 received by user: 1231


  Reply # 1817259 9-Jul-2017 14:16
Send private message quote this post

Even if you got a public IP, it may still not be static, so would still require a reverse DNS service to give you a FQDN to address it. If you could put up with the overhead of keeping the VPN connection up all the time, having the VPN client at the camera end could be easier, and far less dependant on the connection type if you needed to change providers or have a fallback connection as well.


3072 posts

Uber Geek
+1 received by user: 503

Trusted

  Reply # 1817261 9-Jul-2017 14:18
Send private message quote this post

Most decent reputable cameras and recorders coming from china now have a cloud service that they can connect to so you can be on a dynamic and natted ip address but still connect to it without the complications of maintaining a VPN. 

 

 





Ray Taylor
Taylor Broadband (rural hawkes bay)
www.ruralkiwi.com

There is no place like localhost
For my general guide to extending your wireless network Click Here






482 posts

Ultimate Geek
+1 received by user: 5


  Reply # 1817403 9-Jul-2017 17:27
Send private message quote this post

raytaylor:

 

Most decent reputable cameras and recorders coming from china now have a cloud service that they can connect to so you can be on a dynamic and natted ip address but still connect to it without the complications of maintaining a VPN. 

 

 

Cchinese cloud server was what i was trying to avoid..





pɐǝɥ sıɥ uo ƃuıpuɐʇs



482 posts

Ultimate Geek
+1 received by user: 5


  Reply # 1817405 9-Jul-2017 17:28
Send private message quote this post

RunningMan:

 

Even if you got a public IP, it may still not be static, so would still require a reverse DNS service to give you a FQDN to address it.

 

 

Most routers (including the one i was looking at) - support no-ip/dynamic ip updating services so I think I can solve that part





pɐǝɥ sıɥ uo ƃuıpuɐʇs

3222 posts

Uber Geek
+1 received by user: 907


  Reply # 1817416 9-Jul-2017 17:56
Send private message quote this post

Filterer:

 

Wow that was a barrage! 

 

 

Nothing like invoking the wrath of GZ.  A fearsome foe indeed. 

 

Good advice though . . .   Isn't it great how tech people share knowledge.   

 

I sometimes wonder if there might be a 'lawyerzone' equivalent forum for kiwis?


523 posts

Ultimate Geek
+1 received by user: 70

Trusted

  Reply # 1817425 9-Jul-2017 18:27
Send private message quote this post

I concur with many of the above posts. I have a public IP address range with my internet connection but I exclusively use RFC1918 and NAT for all embedded devices. Put another way, I do not connect anything directly to the internet which I don't fully understand what is going on in terms of firewalling, etc.

 

With the increasing use of IPV6 I expect this will open up a whole new Pandora's box.


3872 posts

Uber Geek
+1 received by user: 159


  Reply # 1817701 10-Jul-2017 11:01
Send private message quote this post

A VPN will chew ~3gb a month aiui.  Use a mikrotik router with USB dongle and you can do this quite easerly.

 

 

 

You can then, also lock the camera down to only be talking to your endpoints and nothing else, so it can't get instructions from the mother ship.

 

 

 

Have you ever wondered why the 'spy ware' is in those cameras and the benefit of it?

 

 

 

 

 

 

 

 





Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz




482 posts

Ultimate Geek
+1 received by user: 5


  Reply # 1818836 10-Jul-2017 13:53
Send private message quote this post

DonGould:

 

A VPN will chew ~3gb a month aiui.  Use a mikrotik router with USB dongle and you can do this quite easerly.

 

 You can then, also lock the camera down to only be talking to your endpoints and nothing else, so it can't get instructions from the mother ship. 

 

 

 

 

3GB / month just idling? Hrrm that's too much for my purpose. Just to link back to original topic of the thread - no-one knows if it is still possible to connect to 3g/4g direct? Is this different with rural broadband?





pɐǝɥ sıɥ uo ƃuıpuɐʇs

3872 posts

Uber Geek
+1 received by user: 159


  Reply # 1818921 10-Jul-2017 15:13
Send private message quote this post

Filterer:  3GB / month just idling? Hrrm that's too much for my purpose. 

 

If I've done my math correctly, that's about 9.7bits per second CIR, or about 1 byte every second.  It adds up.

 

 





Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Intel unveils the 8th Gen Intel Core Processor family for desktop
Posted 25-Sep-2017 19:45


Chow brothers plan to invest NZ$100 million in technology
Posted 24-Sep-2017 16:24


Symantec protects data everywhere with Information Centric Security
Posted 21-Sep-2017 15:33


FUJIFILM introduces X-E3 mirrorless camera with wireless connectivity
Posted 18-Sep-2017 13:53


Vodafone announces new plans with bigger data bundles
Posted 15-Sep-2017 10:51


Skinny launches phone with support for te reo Maori
Posted 14-Sep-2017 08:39


If Vodafone dropping mail worries you, you’re doing online wrong
Posted 11-Sep-2017 13:54


Vodafone New Zealand deploy live 400 gigabit system
Posted 11-Sep-2017 11:07


OPPO camera phones now available at PB Tech
Posted 11-Sep-2017 09:56


Norton Wi-Fi Privacy — Easy, flawed VPN
Posted 11-Sep-2017 09:48


Lenovo reveals new ThinkPad A Series
Posted 8-Sep-2017 14:37


Huawei passes Apple for the first time to capture the second spot globally
Posted 8-Sep-2017 10:45


Vodafone initiative enhances te reo Maori pronunciation on Google Maps
Posted 8-Sep-2017 10:40


Voyager Internet expand local internet phone services company with Conversant acquisition
Posted 6-Sep-2017 18:27


NOW Expands in to Tauranga
Posted 5-Sep-2017 18:16



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.