Changes

A guide to using RUT routers in conjunction with Hikvision DS-2DC2332-I, a 3MP Outdoor Network Turret Camera. [[File:Hikvision ds-2cd2332-i camera.png|right|300px|Hikvision DS-2CD2332-I]]

A guide to using RUT routers in conjunction with Hikvision DS-2DC2332-I, a 3MP Outdoor Network Turret Camera.

__TOC__

__TOC__

==Introduction==

==Introduction==

'''Prerequisites''':

'''Prerequisites''':

* A single [[RUT230]], [[RUT240]], [[RUT950]] or [[RUT955]] router

* A router from the RUT series (except RUT850) or TRB140;

* A single Hikvision DS-2CD2332-I camera

* A single Hikvision DS-2CD2332-I camera

* A PC, Laptop, tablet or smartphone

* A PC, Laptop, tablet or smartphone

'''Configuration scheme''':

'''Configuration scheme''':

[[File:Remote access scheme with hikvision camera v2.jpg|1300px]]

[[File:Remote access scheme with hikvision camera v2.jpg|1150px]]

The scheme describes a '''remote device''' (PC, laptop, smartphone, etc.) that is connecting to a RUT router via the Internet whose Public (WAN) IP is '''84.15.186.115''',  through the port '''8888'''. Then the RUT router redirects that device's query to it's LAN, specifically to the camera that is connected via '''LAN cable''' and has the IP address '''192.168.1.64''', through port '''8888''', with the help of a pre-configured '''[[Firewall#Port_Forwarding|Port Forwarding]]''' rule.

The scheme describes a '''remote device''' (PC, laptop, smartphone, etc.) that is connecting to a RUT router via the Internet whose Public (WAN) IP is '''84.15.186.115''',  through the port '''8888'''. Then the RUT router redirects that device's query to it's LAN, specifically to the camera that is connected via '''LAN cable''' and has the IP address '''192.168.1.64''', through port '''8888''', with the help of a pre-configured Port Forwarding rule.

==Camera configuration==

==Camera configuration==

* To do so, simply log in to the router's WebUI by typing in the router's LAN IP address into the URL field of your web browser:

* To do so, simply log in to the router's WebUI by typing in the router's LAN IP address into the URL field of your web browser:

[[File:Logging in to a router with a changed ip address.png]]

[[File:Logging in to a router with a changed ip address.png|1150px]]

'''NOTE''': enter the router's actual IP address, not the phrase from the example.

'''NOTE''': enter the router's actual IP address, not the phrase from the example.

* Next, enter the router's user name and password (default user name: '''admin'''; default password: '''admin01'''):

* Next, enter the router's user name and password (default user name: '''admin'''; default password: '''admin01'''):

[[File:Rut authorization field.png]]

[[File:Rut login page example.png|border|class=tlt-border]]

----

----

* Once you've logged in, navigate to the Network tab located in the upper middle of the WebUI and click on the '''[[LAN]]''' option; or in short, go to '''Network->LAN''':

* Once you've logged in, navigate to the Network tab located in the left panel of the WebUI and click on the Interface option; or in short, go to '''Network->Interface''':

[[File:How to reach lan section.png]]

[[File:How to reach lan v2.png|border|class=tlt-border|alt=|1000x1000px]]

----

----

* In the LAN section, locate the "'''IP address'''" field and change the router's IP address to one that is in the first subnet:

* In the '''Interface''' section edit the '''LAN''' interface, locate the "'''IPv4 address'''" field and change the router's IP address to one that is in the first subnet:

[[File:How to change lan ip.png]]

[[File:How to reach LAN IP v2.png|border|class=tlt-border]]

This can be any valid IP address in the first subnet (for example, like in the figure above 192.168.1.25; or 192.168.1.55, 192.168.1.200, 192.168.1.66, etc.), just make sure that it falls in the range of '''192.168.1.0''' - '''192.168.1.254''' and is '''not the same''' as the camera's IP address (in this case, it can't be 192.168.1.64).

This can be any valid IP address in the first subnet (for example, like in the figure above 192.168.1.25; or 192.168.1.55, 192.168.1.200, 192.168.1.66, etc.), just make sure that it falls in the range of '''192.168.1.0''' - '''192.168.1.254''' and is '''not the same''' as the camera's IP address (in this case, it can't be 192.168.1.64).

* If you are logging in for the first time, you will be greeted with a window such as this:

* If you are logging in for the first time, you will be greeted with a window such as this:

[[File:Hikvision camera activation window.png]]

[[File:Hikvision camera activation window.png|700x700px|alt=]]

Abide to the provided description and choose a valid password for the camera. If you've logged in to the camera before, you probably already have a password. In that case, just type in the user name (default: '''admin'''), the password (the one you chose during first log in) and click "'''Login'''".

Abide to the provided description and choose a valid password for the camera. If you've logged in to the camera before, you probably already have a password. In that case, just type in the user name (default: '''admin'''), the password (the one you chose during first log in) and click "'''Login'''".

* Next, navigate to the '''Configuration''' section, under '''Network''' choose '''Basic Settings''' and '''TCP/IP'''. Change the '''IPv4 Default Gateway''' value to your router's LAN IP address and change (optional) the camera's IP address to the one you prefer (just make sure the camera and the router are in the same subnet):

* Next, navigate to the '''Configuration''' section, under '''Network''' choose '''Basic Settings''' and '''TCP/IP'''. Change the '''IPv4 Default Gateway''' value to your router's LAN IP address and change (optional) the camera's IP address to the one you prefer (just make sure the camera and the router are in the same subnet):

[[File:Hikvision configuration network tcp ip.png]]

[[File:Hikvision configuration network tcp ip.png|1100x1100px|alt=]]

'''NOTE''': once you apply these changes it may be necessary to log in to the camera again (with new settings).

'''NOTE''': once you apply these changes it may be necessary to log in to the camera again (with new settings).

* Next, navigate to the '''Configuration''' section, under '''Network''' choose '''Basic Settings''' and '''Port'''. Change the '''HTTP Port''' value to one that is different than your router's (the default value is '''80'''). For this example we'll be using '''port 8888'''. This done because we're trying to achieve a configuration that will allow remote access to the camera and because later we'll be using Port Forwarding to redirect all connections to a specific port, it is best that this port be different from the default one in order to avoid any problems (for example, so that the router's WebUI will also be reachable with our configuration).

* Next, navigate to the '''Configuration''' section, under '''Network''' choose '''Basic Settings''' and '''Port'''. Change the '''HTTP Port''' value to one that is different than your router's (the default value is '''80'''). For this example we'll be using '''port 8888'''. This done because we're trying to achieve a configuration that will allow remote access to the camera and because later we'll be using Port Forwarding to redirect all connections to a specific port, it is best that this port be different from the default one in order to avoid any problems (for example, so that the router's WebUI will also be reachable with our configuration).

[[File:Hikvision configuration network port.png]]

[[File:Hikvision configuration network port.png|1100x1100px|alt=]]

----

----

* The camera configuration part is done as of the last step. But keep in mind that if you have changed the HTTP Port value, you'll need to specify the port next time that you connect to the camera's WebUI. When connecting to a device through a specific port, the port number is specified by adding a '''colon''' (''':''') and the port number after the device IP address/hostname, as such:

* The camera configuration part is done as of the last step. But keep in mind that if you have changed the HTTP Port value, you'll need to specify the port next time that you connect to the camera's WebUI. When connecting to a device through a specific port, the port number is specified by adding a '''colon''' (''':''') and the port number after the device IP address/hostname, as such:

===Step 1: Enable remote HTTP access===

===Step 1: Enable remote HTTP access===

----

----

* To enable remote HTTP access, log in to the router's WebUI and navigate to the '''Administration''' page, located under the '''System''' tab; in short - go to '''System → Administration''':

* To enable remote HTTP access, log in to the router's WebUI and navigate to the '''System → Administration → Access Control''' tab. Once in the '''Administration-Access Control''', find the '''Enable remote HTTP access''' field and put a check mark next to it:

[[File:Finding system administration.png]]

[[File:How to reach remote HTTP access v2.png|border|class=tlt-border|alt=|800x800px]]

----

----

'''WARNING''': once you set up any type of remote access, your router becomes vulnerable to malicious attacks from unknown hosts throughout the Internet. It is highly recommended that once you enable remote access, you also change the router's default password to a string, custom password. You can change the router's password in '''[[RUT950_Administration#General|System → Administration → General → Administrator Password]]'''

'''WARNING''': once you set up any type of remote access, your router becomes vulnerable to malicious attacks from unknown hosts throughout the Internet. It is highly recommended that once you enable remote access, you also change the router's default password to a string, custom password. You can change the router's password in '''[[RUT950_Administration#General|System → Administration → General → Administrator Password]]'''

====Step 2: Set an APN====

====Step 2: Set an APN====

----

----

* To set the APN, while in the router's WebUI, navigate to the '''Mobile''' page, located under the '''Network''' tab; in short - go to '''Network → Mobile''':

* To set the APN, while in the router's WebUI, navigate to the '''Interfaces''' page, located under the '''Network''' tab; in short - go to '''Network → Interfaces''':

[[File:Finding network mobile.png]]

[[File:How to reach mobile v2.png|border|class=tlt-border|alt=|1000x1000px]]

----

----

* Once in the Mobile window, find the '''APN''' field and enter you Internet Service Provider's APN:

* Once in the '''Interfaces''' window, edit your mobile interface, find the '''APN''' field and enter you Internet Service Provider's APN:

[[File:Setting apn.png]]

[[File:Change apn v2.png|border|class=tlt-border]]

* Additional notes on APN:

* Additional notes on APN:

** '''NOTE 2''': furthermore, it should be noted that not all SIM cards support this functionality. Static or Dynamic Public IP addresses (obtained through APN) are a paid service and setting any APN value for a SIM card that doesn't support this service will most likely result in losing your data connection. If this is the case, it can be fixed by simply deleting the APN, but it also means that remote access through WAN IP will most likely not work on your SIM card.

** '''NOTE 2''': furthermore, it should be noted that not all SIM cards support this functionality. Static or Dynamic Public IP addresses (obtained through APN) are a paid service and setting any APN value for a SIM card that doesn't support this service will most likely result in losing your data connection. If this is the case, it can be fixed by simply deleting the APN, but it also means that remote access through WAN IP will most likely not work on your SIM card.

** '''NOTE 3''': in some cases the SIM card doesn't require an APN in order to obtain a Public IP address. If that is the case for you, simply check what your router's WAN IP address is - if it's already a Public IP address, then you don't need to set an APN. The easiest way to find what your WAN IP address is to log in to the router's WebUI and check the '''WAN''' widget in the '''Overview''' page. The WAN widget will be on the right side of the page, second widget from the top:

** '''NOTE 3''': in some cases the SIM card doesn't require an APN in order to obtain a Public IP address. If that is the case for you, simply check what your router's WAN IP address is - if it's already a Public IP address, then you don't need to set an APN. The easiest way to find what your WAN IP address is to log in to the router's WebUI and check the '''WAN''' widget in the '''Overview''' page. The WAN widget will be on the right side of the page, second widget from the top:

 

[[File:WANpublic.png|alt=|border|center|frameless|660x660px]]

[[File:Private vs public ip.png|1150px]]

===Step 3: Configure Port Forwarding===

===Step 3: Configure Port Forwarding===

[[File:Finding network firewall.png]]

[[File:Finding network firewall v2.png|border|class=tlt-border]]

----

----

* When in the Firewall page, go to '''Port Forwarding''' tab. Scroll down to the bottom of the page and locate the '''New Port Forward Rule''' section. Make up a custom name for a new rule, set the following parameters:

* When in the Firewall page, go to '''Port Forwarding''' tab. Scroll down to the bottom of the page and locate the '''New Port Forward Rule''' section. Make up a custom name for a new rule, set the following parameters:

** External port(s): '''8888''' (camera's HTTP port as set in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article)

** External port(s): '''8888''' (camera's HTTP port as set in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article)

** Internal IP: '''192.168.1.64''' (camera's IP as set in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article)

** Internal IP: '''192.168.1.64''' (camera's IP as set in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article)

** Internal port(s): '''8888'''

** Internal port(s): '''8888'''

[[File:Setting port forwarding.png]]

[[File:Setting port forward v2.png|border|class=tlt-border|alt=|1227x1227px]]

----

----

* If you plan viewing the camera's live stream via some sort of media player (for example, VLC), you should configure an additional Port Forwarding rule. Media players like VLC use the '''RTSP''' protocol. You can check the RTSP port in the camera's WebUI (as discussed in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article), but the RTSP default port is always '''554''' and there is no need to change it since by default the router doesn't use this port for any of its services (unless you use for some custom configuration. In that case, change the default RTSP port). So, once again make up a custom name for a new rule and set the following parameters:

* If you plan viewing the camera's live stream via some sort of media player (for example, VLC), you should configure an additional Port Forwarding rule. Media players like VLC use the '''RTSP''' protocol. You can check the RTSP port in the camera's WebUI (as discussed in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article), but the RTSP default port is always '''554''' and there is no need to change it since by default the router doesn't use this port for any of its services (unless you use for some custom configuration. In that case, change the default RTSP port). So, once again make up a custom name for a new rule and set the following parameters:

** External port(s): '''554''' (camera's RTSP port)

** External port(s): '''554''' (camera's RTSP port)

** Internal IP: '''192.168.1.64''' (camera's IP as set in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article)

** Internal IP: '''192.168.1.64''' (camera's IP as set in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article)

[[File:Rtsp port forwarding.png]]

[[File:RTSP port forward v2.png|border|class=tlt-border|alt=|1235x1235px]]

----

----

* Don't forget to click '''Add''' after you've made the changes. After you have added the new rule, you will redirected to that rule's configuration window. Everything should already be in order so just click '''Save''' and your rule will be created. The new rule will appear at the bottom of the '''Port Forwarding Rules''' list, where you can check its status and make additional configurations if need be:

* Don't forget to click '''Add''' after you've made the changes. After you have added the new rule, you will redirected to that rule's configuration window. Everything should already be in order so just click '''Save''' and your rule will be created. The new rule will appear at the bottom of the '''Port Forwarding Rules''' list, where you can check its status and make additional configurations if need be:

[[File:Port forwarding rule list.png]]

 

[[File:Port forward v2.png|border|class=tlt-border|alt=|1238x1238px]]

'''FINAL NOTE''': as you can see, once you add the new rule, it is already enabled and ready for use. From this point no more additional configurations are required, as your remote camera monitoring configuration is fully set up. Unless you want to set up Dynamic DNS for your router, you can skip to the '''[[#Testing_the_set_up|Testing the set up]]''' part of this guide.

'''FINAL NOTE''': as you can see, once you add the new rule, it is already enabled and ready for use. From this point no more additional configurations are required, as your remote camera monitoring configuration is fully set up. Unless you want to set up Dynamic DNS for your router, you can skip to the '''[[#Testing_the_set_up|Testing the set up]]''' part of this guide.

As mentioned in the introduction to this article, the configurations described here apply to the Hikvision DS-2CD2332-I camera. While that is true, the basic principles used to achieve this configuration should still apply to other products as well. For example, in order to achieve remote access, the configuration from the router's side will be practically identical and only things like IP addresses and port number should differ. From the camera's side, the User Interface may be different but the configuration parameters should remain the same.

As mentioned in the introduction to this article, the configurations described here apply to the Hikvision DS-2CD2332-I camera. While that is true, the basic principles used to achieve this configuration should still apply to other products as well. For example, in order to achieve remote access, the configuration from the router's side will be practically identical and only things like IP addresses and port number should differ. From the camera's side, the User Interface may be different but the configuration parameters should remain the same.

==External links==

==External links==

https://www.videolan.org/vlc/download-windows.html - VLC player download

https://www.videolan.org/vlc/download-windows.html - VLC player download