D-Link Forums
The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: habit04 on January 17, 2010, 07:54:24 PM
-
I have a DFL-210 firmware 2.26.00
First the router is working fine, I set up a VPN, and it works I can access my cameras through the VPN, still have trouble accessing some of the lan clients...but thats another issue (I think?),the issue I am having is I have 10 dlink cameras on the LAN that I need to forward the ports and setup the virtual ips...
I have followed a guide I found...yet cannot get it to work...and im sure unsure why its not working.....
IP-CAM_1 192.168.0.104:79(control panel), PORTS TO FOWARD FOR THE CAM 4001-4003(A/V stream)
IP-CAM_1 192.168.0.105:80(control panel), PORTS TO FOWARD FOR THE CAM 5001-5003
IP-CAM_1 192.168.0.106:81(control panel), PORTS TO FOWARD FOR THE CAM 6001-6003
IP-CAM_1 192.168.0.107:82(control panel), PORTS TO FOWARD FOR THE CAM 7001-7003
I wont list the rest for obvious reasons....just an example of what I have..
The current setting under IP Rule is:(in main rule folder)
1. Cam1 Action/SAT----SrcIf/any----SrcNet/all-nets-----DestIf/Core----DestNet/WanIP---SAT-Tab- Destination IP "checked" to 192.168.0.104
2. Cam1 Action/NAT----SrcIf/any----SrcNet/all-nets-----DestIf/Core----DestNet/WanIP
3. Cam1 Action/ALLOW----SrcIf/any----SrcNet/all-nets-----DestIf/Core----DestNet/WanIP---
Service for allRules is: all_tcpudp
I also tried another guide where I ARPed 10 wan addresses, they are still ARPed right now, but I am not using them.
The goal I am trying to obtain is to be able to use my wanIP with according port number to get access to my cameras.
I do not want to use a VPN of any sort to get access to my cameras.
(wan_IP)
xx,xx,xx,xx:79
xx,xx,xx,xx:80
xx,xx,xx,xx:81
xx,xx,xx,xx:82
xx,xx,xx,xx:83
etc...
Please any help would be appreciated...if you need me to I can send you my config file, or a lot of screen shots!!
Thank you for your time.
Justin R.
-
What cameras are you use? Do you have additional (white) IP addresses?
-
I think rule number 2 (NAT rule) is not necessary
-
What cameras are you use? Do you have additional (white) IP addresses?
I have DCS-6620s 4 of them, and DCS-5300s for the rest.
I do have white list IP address listed....I listed one camera 192.168.0.104, and my LAN IP.
That is all I have listed under my white list hosts.
-
I think rule number 2 (NAT rule) is not necessary
I disabled the NAT Rule, and the reslult is still the same. The webpage acts like it is trying to connect then stops....ill post the logs shortly
Thanks
-
First. It seems, your cameras are use UPnP. When I buyed same products for me, i should use just DCS-910/920 because more new D-Link's cameras require for UPnP on router. Please make sure that your cameras can work with fixed ports.
Second. Does your cameras have DFL as default gateway? If no, disable allow rule and enable NAT.
-
First. It seems, your cameras are use UPnP. When I buyed same products for me, i should use just DCS-910/920 because more new D-Link's cameras require for UPnP on router. Please make sure that your cameras can work with fixed ports.
Second. Does your cameras have DFL as default gateway? If no, disable allow rule and enable NAT.
Thanks for the reply, Yes the cameras are UPnP, there is a check mark in the cameras firmware/software to either enable or disable UPnP.
So as of right now it is checked, and I do have the option to "fix" the ports they are static sence I am the one that sets them in the camera software myself.
Also in the camera configh the setting "default router" which is the gateway I have set to 192.168.0.1, So with that being said I do not need the NAT rule is that correct? And I do need the Allow rule?
Thanks for your help!
-
Yes, you can use allow rule. But, anyway, first is UPnP because ports for realtime data should be static and without tries to use UPnP.