Hikvision

RosieJoe

I've my system connected and up and running. I used the wizard to accept all defaults when I started up the DVR. I can view the live stream and playback on the monitor. I then installed ivms on my phone and I can connect to the system. When using my own Wi-Fi I can see the live view and playback ok. But when I try using another Wi-Fi or my mobile data I cannot connect to the cameras.

Any help on how I can resolve this?

Audioslaven

RosieJoe wrote: »

I've my system connected and up and running. I used the wizard to accept all defaults when I started up the DVR. I can view the live stream and playback on the monitor. I then installed ivms on my phone and I can connect to the system. When using my own Wi-Fi I can see the live view and playback ok. But when I try using another Wi-Fi or my mobile data I cannot connect to the cameras.

Any help on how I can resolve this?

You need to open the ports on your router to connect to the cameras/dvr. Do you know what ports they are using?

RosieJoe

I'll have to get a look at them tomorrow. 80 and 554 are 2 that stick in my mind but I'd need to verify that

gctest50

Change the ports away from standard ( especially the 80 one ) or it'll get hammered by the pc's etc out there that are infected with virus/ rootkit etc etc

keepalive213

I had a similar problem with a Triax DVR, I don't recall opening ports, if it's P2P you shouldn't have to??
I'd try another app I'm sure there are other ones.

fred funk }{

Use the cloud.

alta stare

When you are out and about you need to have ivms set up to use your external ip address which your ip company give you. The next time you are at home use your pc and go to ipchicken or whatsmyip and it will tell you your external ip.

When you have that set up your phone (ivms) with the same settings as you already have just change the ip address.

You will end up with two devices listed, one with your home network and one with your mobile network. When out and about just use the listed device with your external ip address. It would also be a benefit to enquire to your network provider as to the cost for a static ip. The reason for this is that the external ip could change at any point and you wont know until you try view your cameras when using your mobile data. Again if that does happen you could just get your new external ip and input that into ivms and you will be good to go again.

Regarding your ports, they are already open as you can view your system over your home WIFI. The default ports are 80, 8000, 554. It is good practice to change port 80 but i would not worry if it is too much bother for you.

As for using the cloud.......dont as it is not as secure as using your own set up.

Audioslaven

alta stare wrote: »

Regarding your ports, they are already open as you can view your system over your home WIFI. The default ports are 80, 8000, 554. It is good practice to change port 80 but i would not worry if it is too much bother for you.

Thats fine when on the internal network but connecting into the camera from outside his own network, he needs to open the ports when he uses an app other than ivms

Also you can use no-ip for DDNS and register this on the camera. It allows three free names

alta stare

Audioslaven wrote: »

Thats fine when on the internal network but connecting into the camera from outside his own network, he needs to open the ports when he uses an app other than ivms

Also you can use no-ip for DDNS and register this on the camera. It allows three free names

Why would they need to use any other app? IVMS is a good solid easy to use app. As im sure you Know once the ports are open on the router than anything can connect to it as long as they know where to look.

Using your own configuration over HIKVISIONS is less susceptible to attack given HV servers are so well known. I have never (and will never) install a system and used the HV ddns service.

Audioslaven

alta stare wrote: »

Why would they need to use any other app? IVMS is a good solid easy to use app. As im sure you Know once the ports are open on the router than anything can connect to it as long as they know where to look.

Using your own configuration over HIKVISIONS is less susceptible to attack given HV servers are so well known. I have never (and will never) install a system and used the HV ddns service.

Different camera models. I use a specific app and connect into the cameras and like you mentioned use specific ports and apply strong passwords on the cameras.

alta stare

Audioslaven wrote: »

Different camera models. I use a specific app and connect into the cameras and like you mentioned use specific ports and apply strong passwords on the cameras.

Once the router is configured for specific ports to be open then there is no more to be done with the router regarding port forwarding whether its the home WIFI or external address seeking access.

Just a curious question if i may. Are you saying you have different passwords on your cameras than your NVR?

RosieJoe

alta stare wrote: »

When you are out and about you need to have ivms set up to use your external ip address which your ip company give you. The next time you are at home use your pc and go to ipchicken or whatsmyip and it will tell you your external ip.

When you have that set up your phone (ivms) with the same settings as you already have just change the ip address.

You will end up with two devices listed, one with your home network and one with your mobile network. When out and about just use the listed device with your external ip address. It would also be a benefit to enquire to your network provider as to the cost for a static ip. The reason for this is that the external ip could change at any point and you wont know until you try view your cameras when using your mobile data. Again if that does happen you could just get your new external ip and input that into ivms and you will be good to go again.

Regarding your ports, they are already open as you can view your system over your home WIFI. The default ports are 80, 8000, 554. It is good practice to change port 80 but i would not worry if it is too much bother for you.

As for using the cloud.......dont as it is not as secure as using your own set up.

I tried this, got my external IP , which I can ping successfully, but when I duplcate the settings in IVMS I still get an connection filure error. Any other things that Ineed to look at?

alta stare

RosieJoe wrote: »

I tried this, got my external IP , which I can ping successfully, but when I duplcate the settings in IVMS I still get an connection filure error. Any other things that Ineed to look at?

So you have changed the internal ip to the external ip and kept all other settings?

Audioslaven

alta stare wrote: »

Once the router is configured for specific ports to be open then there is no more to be done with the router regarding port forwarding whether its the home WIFI or external address seeking access.

Just a curious question if i may. Are you saying you have different passwords on your cameras than your NVR?

Say for example, I have three IP Hik cameras. I only use the cameras for viewing and not recording so no NVR.

I set the cameras up with a static ip addresses and set the specific port for the cameras(move off the default ports). I change the admin password. I use the same username and password for the three cameras for the specific network/client. I then open the ports on the router and these ports are forwarded to the specific IP addresses of the cameras in question.
I set up a DDNS from no-ip.org and set this up on one of the camera so the DDNS gets updated with the latest external ip address

I download my app and connect to the cameras using the no-ip DDNS. Enter my port with the username and password and bingo. The user just needs to select the camera they wish to view.

This is how I do it. There are probably other ways especially with the NVR.

alta stare

Audioslaven wrote: »

Say for example, I have three IP Hik cameras. I only use the cameras for viewing and not recording so no NVR.

I set the cameras up with a static ip addresses and set the specific port for the cameras(move off the default ports). I change the admin password. I use the same username and password for the three cameras for the specific network/client. I then open the ports on the router and these ports are forwarded to the specific IP addresses of the cameras in question.
I set up a DDNS from no-ip.org and set this up on one of the camera so the DDNS gets updated with the latest external ip address

I download my app and connect to the cameras using the no-ip DDNS. Enter my port with the username and password and bingo. The user just needs to select the camera they wish to view.

This is how I do it. There are probably other ways especially with the NVR.

Ah right fair play. It seems a bit long winded to me for what it is but fair dues for getting it working. Its always nice when set ups like that work.

RosieJoe

alta stare wrote: »

So you have changed the internal ip to the external ip and kept all other settings?

Yes

alta stare

RosieJoe wrote: »

Yes

Do you have two dvrs listed on your devices section on the app excluding the hikvision one which is not usable? You should have the device which works when you are at home (internal ip) and then the new one which you want to use when on mobile data? (external ip)

If you are trying to connect to the external ip device and you are at home make sure your WIFI is off on the phone otherwise the WIFI will try take over the connection.

RosieJoe

I have it so there are 2 data listed for my system. All data is the same bar the ip address. With Wi-Fi switched off I get a connection failure error when trying to use the external ip dvr

Audioslaven

alta stare wrote: »

Do you have two dvrs listed on your devices section on the app excluding the hikvision one which is not usable? You should have the device which works when you are at home (internal ip) and then the new one which you want to use when on mobile data? (external ip)

If you are trying to connect to the external ip device and you are at home make sure your WIFI is off on the phone otherwise the WIFI will try take over the connection.

Do you need to port forward on the router for the NVR?

alta stare

RosieJoe wrote: »

I have it so there are 2 data listed for my system. All data is the same bar the ip address. With Wi-Fi switched off I get a connection failure error when trying to use the external ip dvr

Whoever installed the system would of opened the ports if you already have it on your phone so that should not need to be done again. Using the exact same settings with the external ip instead of the internal should let you view it remotely.

Are the cameras still viewable over your WIFI connection?

alta stare

Audioslaven wrote: »

Do you need to port forward on the router for the NVR?

If the system is on the phone already then port forwarding has been done already.

Audioslaven

alta stare wrote: »

If the system is on the phone already then port forwarding has been done already.

But when he views it locally no port forwarding is required. It is only required when he is accessing it from an external network, so I assume he needs to port forward the port to the ip address of the NVR?

Also some ISP providers block port 80 AFAIK. Are you using port 80?

alta stare

Audioslaven wrote: »

But when he views it locally no port forwarding is required. It is only required when he is accessing it from an external network, so I assume he needs to port forward the port to the ip address of the NVR?

Also some ISP providers block port 80 AFAIK. Are you using port 80?

Maybe i am making an incorrect assumption that it was installed by someone who does it for a living therefore portforwarding would of been done from the get go.

Yeah Eir block port 80 dont they.

Audioslaven

alta stare wrote: »

Maybe i am making an incorrect assumption that it was installed by someone who does it for a living therefore portforwarding would of been done from the get go.

Yeah Eir block port 80 dont they.

Ya I think he installed it himself.

I would change the port to another number like 1000 on the NVR and log into your router and port forward that port to the NVR. If you don't know how to do it google the router make and port forward.

You can use this url to see if the port is open ...put in the port you set in the NVR https://www.yougetsignal.com/tools/open-ports/

alta stare

Audioslaven wrote: »

Ya I think he installed it himself.

I would change the port to another number like 1000 on the NVR and log into your router and port forward that port to the NVR. If you don't know how to do it google the router make and port forward.

You can use this url to see if the port is open ...put in the port you set in the NVR https://www.yougetsignal.com/tools/open-ports/

I figured it was installed professionally as when i mentioned it originally about portforwarding and i wasnt corrected so i thought my presumption was well founded

Also to note just in case if it is Vodafone or Eir to be mindful on their routers portmapping is what to look for. They seem to like to confuse things +1 on the port change, its mad the amount of people who leave the default settings on their system.

RosieJoe

Thanks for the help so far. Some stuff for me left to try.

I installed everything to date so I've done nothing on the router or the ports. I can still see the local ip when using Wi-Fi. It's just the external ip that I cannot see over my phone data.

RosieJoe

Just checked my port 8000 and it is closed. I'll try opening this tomorrow. Thanks again

alta stare

RosieJoe wrote: »

Just checked my port 8000 and it is closed. I'll try opening this tomorrow. Thanks again

My apologises for assuming you had it installed by a professional. Yeah if you open the ports and do the set up using the external ip you will get it working.

Portfowarding.com is a great resource to use if you are unsure how to do it. They have loads of guides for pretty much all makes of routers.

Audioslaven

alta stare wrote: »

My apologises for assuming you had it installed by a professional. Yeah if you open the ports and do the set up using the external ip you will get it working.

Portfowarding.com is a great resource to use if you are unsure how to do it. They have loads of guides for pretty much all makes of routers.

Also, I had it on mobile broadband that I opened the ports on the router but the ISP had to change my connection properties so that it allowed me get an individual IP address rather than a generic ip address on their network. So just be aware that sometimes the issue could be with the ISP after a few hours troubleshooting :eek:

The 8000 is the server admin port so you need to open the http/rtsp port. See this doc on it http://www.hikvision.ca/ueditor/net/upload/2015-06-10/3b56a0c6-f61c-4381-866e-dc49e5c30c88.pdf

RosieJoe

Thanks for all the help. I managed to sort the port forwarding and i can now access the cameras from both my wifi and phone data.

eadt14

Hi guys,
I'm having the same issue with my setup, can anyone talk me through opening a port. It's a Vodafone router.

Thanks

Audioslaven

eadt14 wrote: »

Hi guys,
I'm having the same issue with my setup, can anyone talk me through opening a port. It's a Vodafone router.

Thanks

See here http://deviceguides.vodafone.ie/web/vodafone-hg658c-windows-7/configuration/settings/set-up-port-forwarding

fred funk }{

eadt14 wrote: »

Hi guys,
I'm having the same issue with my setup, can anyone talk me through opening a port. It's a Vodafone router.

Thanks

How old is your system? It's easy to set up the cloud and you don't need to go near the router.

eadt14

fred funk }{ wrote: »

How old is your system? It's easy to set up the cloud and you don't need to go near the router.

Hi Fred,
I only have it installed a couple of weeks

keepalive213

fred funk }{ wrote: »

How old is your system? It's easy to set up the cloud and you don't need to go near the router.

I would have thought the same thing, are most new systems not p2p now, no static IP needed or port forwarding? Download app, scan code, Bob's your uncle...?

fred funk }{

eadt14 wrote: »

Hi Fred,
I only have it installed a couple of weeks

Download an app called ezviz and set up a free account. Then enable the cloud from the network settings on the dvr. From the ezviz app add your dvr and bobs your uncle.

alta stare

eadt14 wrote: »

Hi guys,
I'm having the same issue with my setup, can anyone talk me through opening a port. It's a Vodafone router.

Thanks

Turn off DCHP on the DVR
Give your DVR an ip address
Set the DDNS as googles: Primary 8.8.8.8 Secondary: 8.8.4.4

Log into your router
Go to Forwarding
Then Port Mapping
Create new
Name the rule
Add the port you want, lets say you choose keep its default at 80
Add the DVRs ip address which you gave on the DVR itself. Keeping it high in the ip range keeps it away from possible conflict. So just say 192.168.1.200
Add gateway if it asks (Routers IP address)
Save and do all of that again for the other two ports. 8000 and 554
Log out

Add the IVMS 4500 app to your phone/tablet.

Go to whatsmyip.com and get your external ip address.

Setting up the app is straight forward.

When you open the app select Ireland as the region
On the top right is like 3 lines indicating there is menu, select that
Add new device
Name the device
Select the IP Domain option
Add the Web Port (for instance 80)
Put in your DVRs username and password
Then select Start Live View

You should then have live view if you were successful.

Using HIKvisions own set up imo is not as secure as using your own settings hence why i always install DVRs/NVRs using the IP Domain method.

fred funk }{

You should always assume once any CCTV is connect to the internet that it's easily accessible if someone wanted too. These are chinese made and owned by the Chinese government so you can imagine what could potentially be going on behind the scenes.

alta stare

keepalive213 wrote: »

I would have thought the same thing, are most new systems not p2p now, no static IP needed or port forwarding? Download app, scan code, Bob's your uncle...?

Its more secure using your own settings (providing you change the defaults to anything which is networked) imo any installer doing it via the scan code is lazy. As for someone using the scan code and who may not know how to set it up via the router well that is fair enough but id urge them to take the time to do it by the router method.

alta stare

fred funk }{ wrote: »

You should always assume once any CCTV is connect to the internet that it's easily accessible if someone wanted too. These are chinese made and owned by the Chinese government so you can imagine what could potentially be going on behind the scenes.

Any device connected to the internet is at risk but at less risk if they are set up to make it harder for anyone to attempt access. Hikvision have had known attacks on its systems because people are using the default passwords and using the easy method to remote view their devices.

So yeah blame the Chinese the Americans, Brits, Russians, North Koreans have been at that lark for years. To take the lazy way out just because of that view is ridiculous to be fair. No matter where we are or what we do there is potential for your data to be accessed so lets make it harder by avoiding the obvious back doors.

keepalive213

If the Chinese government are spying on my cows in the shed through the çameras they have little else to be doing!

Mr. G

The more ports you open, the more you are exposed. You do not need to open ports for http in order to use the app. You should be able to get away with using the app by opening the server port only.

In my opinion, it's no longer a closed circuit once you connect the camera to the internet anyway.

There will always be ways to circumvent the 99.9% of security systems, that is a matter of life. If you try hard enough you will find a way. Exposing yourself by opening ports to the vulgaris of the internet is allowing others to attempt to authenticate against your security system. If you locked this down to specific IPs, e.g. your works IP, and only forwarded ports for those IPs, then your risk of being compromised is somewhat reduced.

Updating your firmware on your devices, using strong passwords and being aware of how you could be compromised is all part of the puzzle.

Of course if you think someone who has compromised your NVR/DVR to look at cows isn't a problem, it might be if that box sits on the same network as the rest of your devices. As that box is behind the main gateway firewall, the rest of your devices on the same network are now exposed.

It's always good to check your equipment is functioning, backup regularly if needs be, segment your network and have a tin foil hat.

But seriously, opening ports always has risks. If you can't afford that chance or risk, disconnect the box from the network. Most, including me, are willing to sacrifice some security for convenience. That's how it is, even if the Chinese government want to use machine learning algorithms on cows.

Audioslaven

Interesting posts from the last few users and lots of good tips. I open just the specific ports for the cameras. I don't open a wide range of ports, just the required ports to for each specific cameras. Strong passwords on the admin accounts and set up a seperate account to access the camera for the app, so that they can only view the feed and not get into the admin centre. I am in control of the settings rather than this P2P set up

I have also used long ranger transmitters to send signal from location A to Location B. I use TPLink CPE210 and make sure only the AP and client can only connect to each other over the mac address.

As Alta Stare mentioned, changing the defaults is very important and where possible restrict access to just specific devices.

Gerrymandering reborn

alta stare wrote: »

Turn off DCHP on the DVR
Give your DVR an ip address
Set the DDNS as googles: Primary 8.8.8.8 Secondary: 8.8.4.4

Log into your router
Go to Forwarding
Then Port Mapping
Create new
Name the rule
Add the port you want, lets say you choose keep its default at 80
Add the DVRs ip address which you gave on the DVR itself. Keeping it high in the ip range keeps it away from possible conflict. So just say 192.168.1.200
Add gateway if it asks (Routers IP address)
Save and do all of that again for the other two ports. 8000 and 554
Log out

Add the IVMS 4500 app to your phone/tablet.

Go to whatsmyip.com and get your external ip address.

Setting up the app is straight forward.

When you open the app select Ireland as the region
On the top right is like 3 lines indicating there is menu, select that
Add new device
Name the device
Select the IP Domain option
Add the Web Port (for instance 80)
Put in your DVRs username and password
Then select Start Live View

You should then have live view if you were successful.

Using HIKvisions own set up imo is not as secure as using your own settings hence why i always install DVRs/NVRs using the IP Domain method.

Hi,

I'm trying to do the same except i have a virgin media router. When i log into the router, i see no port forwarding option.

Also i managed to set up remote viewing on iVMS 4500 using the 'online device ' method but i figured i can only view dvr if it is connected to same network only (which is no use)


Another question, why is playback slow on iVMS 4500 e.g to view 1 second of footag it take 4 seconds. I have 360mbps download and 36mbps upload speeds.

Thanks

fred funk }{

Gerrymandering reborn wrote: »

Hi,

I'm trying to do the same except i have a virgin media router. When i log into the router, i see no port forwarding option.

Also i managed to set up remote viewing on iVMS 4500 using the 'online device ' method but i figured i can only view dvr if it is connected to same network only (which is no use)


Another question, why is playback slow on iVMS 4500 e.g to view 1 second of footag it take 4 seconds. I have 360mbps download and 36mbps upload speeds.

Thanks

Your Internet is IPV6 which doesn't have port forwarding. You can either set it up via the cloud or ask VM to change the configuration of your modem to IPV4.

SlowBlowin

alta stare wrote: »

Turn off DCHP on the DVR
Give your DVR an ip address
Set the DDNS as googles: Primary 8.8.8.8 Secondary: 8.8.4.4

Log into your router
Go to Forwarding
Then Port Mapping
Create new
Name the rule
Add the port you want, lets say you choose keep its default at 80
Add the DVRs ip address which you gave on the DVR itself. Keeping it high in the ip range keeps it away from possible conflict. So just say 192.168.1.200
Add gateway if it asks (Routers IP address)
Save and do all of that again for the other two ports. 8000 and 554
Log out

Add the IVMS 4500 app to your phone/tablet.

Go to whatsmyip.com and get your external ip address.

Setting up the app is straight forward.

When you open the app select Ireland as the region
On the top right is like 3 lines indicating there is menu, select that
Add new device
Name the device
Select the IP Domain option
Add the Web Port (for instance 80)
Put in your DVRs username and password
Then select Start Live View

You should then have live view if you were successful.

Using HIKvisions own set up imo is not as secure as using your own settings hence why i always install DVRs/NVRs using the IP Domain method.

Re: Your first instruction, it should be mentioned that the fixed IP you give your DVR should be outside the scope (range) of the DHCP setting in your router, or it might stop working later on when your router issues a duplicate IP.

SB

alta stare

fred funk }{ wrote: »

Your Internet is IPV6 which doesn't have port forwarding. You can either set it up via the cloud or ask VM to change the configuration of your modem to IPV4.

Thats not accurate at all. Iv port forwarded on a VM router before.

alta stare

SlowBlowin wrote: »

Re: Your first instruction, it should be mentioned that the fixed IP you give your DVR should be outside the scope (range) of the DHCP setting in your router, or it might stop working later on when your router issues a duplicate IP.

SB

That is why i said go high in the range as it very unlikely for that to happen. Plus if anyone wanted to ensure no issues then they could just reserve the ip they want.

alta stare

Gerrymandering reborn wrote: »

Hi,

I'm trying to do the same except i have a virgin media router. When i log into the router, i see no port forwarding option.

Also i managed to set up remote viewing on iVMS 4500 using the 'online device ' method but i figured i can only view dvr if it is connected to same network only (which is no use)


Another question, why is playback slow on iVMS 4500 e.g to view 1 second of footag it take 4 seconds. I have 360mbps download and 36mbps upload speeds.

Thanks

What router have you got?

SlowBlowin

alta stare wrote: »

That is why i said go high in the range as it very unlikely for that to happen. Plus if anyone wanted to ensure no issues then they could just reserve the ip they want.

Yes as you say very unlikely to happen, but still could happen I have seen many routers that go upto 250 by default, so make sure its outside the scope then it will never happen, much better.

Not all routers allow you to reserve address.

fred funk }{

alta stare wrote: »

Thats not accurate at all. Iv port forwarded on a VM router before.

Reread my post.