Port Forwarding on a Huawei R215 Router Powered by Mobile Data only.

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Port Forwarding on a Huawei R215 Router Powered by Mobile Data only.

Jonahs8

9 posts

Wannabe Geek

Topic # 184055 9-Nov-2015 04:06

Is it possible to do this?

I am after using a Mobile Wifi router to provide a CCTV option in an off grid area.
The device uses my Carriers network via SIM card to access the internet so there are no hard lines going into the device.

An external IP address is available.
The inbuilt firmware/software of the device which is accessed via a browser on the same network. the only options are DMZ and NAT. There is no Port Forwarding options provided (the firmware/software is that of my carriers and NOT the OEMs.

Does anyone know if there is a way around this at all?
that includes via 3rd party software/ sites.

Thank you in anticipation.

sbiddle

26340 posts

Uber Geek
+1 received by user: 5918

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 1423419 9-Nov-2015 07:18

2 people support this post

Most mobile networks operate using CG-NAT and block inbound uninitiated traffic due to the implications of a attacks such as DDoS or DNS amplification on end users.

It sounds like you need to source better hardware that's more suited to your needs as 99% of end users would never need port forwards, and never be able to use them anyway due to the above rules which would prevent it.

You are also aware of the security issues that could arise from port forwards to CCTV kit? I would never under any circumstances have CCTV hardware exposed to the internet.

sbiddle

26340 posts

Uber Geek
+1 received by user: 5918

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 1423420 9-Nov-2015 07:23

I noticed in another thread you're planning to use cheap Chinese CCTV gear. If you set up a port forward to this I can just about guarantee it won't be a case of if you'll be hacked, but when. Some of the security holes and backdoors in much of this kit (not to mention wide open ONVIF access requiring no authentication being the norm) mean anybody can potentially access your cameras.

Try Wrike: fast, easy, and efficient project collaboration software

Jonahs8

9 posts

Wannabe Geek

Reply # 1423937 9-Nov-2015 18:53

sbiddle: I noticed in another thread you're planning to use cheap Chinese CCTV gear. If you set up a port forward to this I can just about guarantee it won't be a case of if you'll be hacked, but when. Some of the security holes and backdoors in much of this kit (not to mention wide open ONVIF access requiring no authentication being the norm) mean anybody can potentially access your cameras.

Thank you for your reply.
Sorry if my next questiona seem obvious to most, but...

Do you have a better recommendation for an entry level brand to use? For the purpose of these cameras I can't really justify £100 ($213) per camera. The Sricams are £35 ($74).

I have changed all default log in details from all cameras used but I assume this isn't the authentication you meant?

I think it may help to mention the cameras will only be watching my rabbits when I am working away from home. The set up in my other thread is to provide me with remote access whilst I am away from home to ensure they are being looked after correctly. This threads question is about setting up remote access CCTV to monitor the Horses. Apart from any other (unknown to me) security hole issues(??), if someone fancies watching my pets, they are cute. ;-).

thank you again.

Aredwood

2575 posts

Uber Geek
+1 received by user: 946

Subscriber

Reply # 1423938 9-Nov-2015 18:53

And when they do get hacked say goodbye to all your mobile data. And if you are on a plan that defaults to using casual data when the bundled amount runs out. Then make sure you are sitting down when you open the bill from your cellphone company.

Spyware

1922 posts

Uber Geek
+1 received by user: 295

Subscriber

Reply # 1423942 9-Nov-2015 19:03

One solution is to run OpenVPN on a VPS in the cloud. Use R Pi onsite running OpenVPN client connecting out. All additional client devices then connect to site via VPS in the cloud.

Ross

Spark FibreMAX using Mikrotik CCR1009-8G-1S-1S+

Speed Test

Jonahs8

9 posts

Wannabe Geek

Reply # 1423959 9-Nov-2015 19:21

Spyware: One solution is to run OpenVPN on a VPS in the cloud. Use R Pi onsite running OpenVPN client connecting out. All additional client devices then connect to site via VPS in the cloud.

Hi Spyware,

My brother runs A R-Pi as a server. Can you direct my to a YouTube channel or a website that can help me set this process up (more than happy to learn what needs to be done)

Thanks again,

Jase2985

7561 posts

Uber Geek
+1 received by user: 2450

Subscriber

Reply # 1423973 9-Nov-2015 20:03

or just run a program like teamviewer to remotely connect to your home PC