Hikvision: remote camera access: Difference between revisions

__TOC__

==Introduction==

==Configuration overview and prerequisites==

'''Prerequisites''':

* A single Hikvision DS-2CD2332-I camera

* A PC, Laptop, tablet or smartphone

'''Configuration scheme''':

==Camera configuration==

* To do so, simply log in to the router's WebUI by typing in the router's LAN IP address into the URL field of your web browser:

'''NOTE''': enter the router's actual IP address, not the phrase from the example.

* Next, enter the router's user name and password (default user name: '''admin'''; default password: '''admin01'''):

----

----

This can be any valid IP address in the first subnet (for example, like in the figure above 192.168.1.25; or 192.168.1.55, 192.168.1.200, 192.168.1.66, etc.), just make sure that it falls in the range of '''192.168.1.0''' - '''192.168.1.254''' and is '''not the same''' as the camera's IP address (in this case, it can't be 192.168.1.64).

* Once you have all of the above in order, type in the camera's IP address into the URL field of your web browser and press "Enter".

----

* If you are logging in for the first time, you will be greeted with a window such as this:

Abide to the provided description and choose a valid password for the camera. If you've logged in to the camera before, you probably already have a password. In that case, just type in the user name (default: '''admin'''), the password (the one you chose during first log in) and click "'''Login'''".

* Next, navigate to the '''Configuration''' section, under '''Network''' choose '''Basic Settings''' and '''TCP/IP'''. Change the '''IPv4 Default Gateway''' value to your router's LAN IP address and change (optional) the camera's IP address to the one you prefer (just make sure the camera and the router are in the same subnet):

'''NOTE''': once you apply these changes it may be necessary to log in to the camera again (with new settings).

* Next, navigate to the '''Configuration''' section, under '''Network''' choose '''Basic Settings''' and '''Port'''. Change the '''HTTP Port''' value to one that is different than your router's (the default value is '''80'''). For this example we'll be using '''port 8888'''. This done because we're trying to achieve a configuration that will allow remote access to the camera and because later we'll be using Port Forwarding to redirect all connections to a specific port, it is best that this port be different from the default one in order to avoid any problems (for example, so that the router's WebUI will also be reachable with our configuration).

----

* The camera configuration part is done as of the last step. But keep in mind that if you have changed the HTTP Port value, you'll need to specify the port next time that you connect to the camera's WebUI. When connecting to a device through a specific port, the port number is specified by adding a '''colon''' (''':''') and the port number after the device IP address/hostname, as such:

==Router configuration==

===Step 1: Enable remote HTTP access===

----

----

'''WARNING''': once you set up any type of remote access, your router becomes vulnerable to malicious attacks from unknown hosts throughout the Internet. It is highly recommended that once you enable remote access, you also change the router's default password to a string, custom password. You can change the router's password in '''[[RUT950_Administration#General|System → Administration → General → Administrator Password]]'''

====Step 2: Set an APN====

----

----

* Additional notes on APN:

** '''NOTE 2''': furthermore, it should be noted that not all SIM cards support this functionality. Static or Dynamic Public IP addresses (obtained through APN) are a paid service and setting any APN value for a SIM card that doesn't support this service will most likely result in losing your data connection. If this is the case, it can be fixed by simply deleting the APN, but it also means that remote access through WAN IP will most likely not work on your SIM card.

** '''NOTE 3''': in some cases the SIM card doesn't require an APN in order to obtain a Public IP address. If that is the case for you, simply check what your router's WAN IP address is - if it's already a Public IP address, then you don't need to set an APN. The easiest way to find what your WAN IP address is to log in to the router's WebUI and check the '''WAN''' widget in the '''Overview''' page. The WAN widget will be on the right side of the page, second widget from the top:

===Step 3: Configure Port Forwarding===

----

* When in the Firewall page, go to '''Port Forwarding''' tab. Scroll down to the bottom of the page and locate the '''New Port Forward Rule''' section. Make up a custom name for a new rule, set the following parameters:

** External port(s): '''8888''' (camera's HTTP port as set in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article)

** Internal IP: '''192.168.1.64''' (camera's IP as set in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article)

** Internal port(s): '''8888'''

----

* If you plan viewing the camera's live stream via some sort of media player (for example, VLC), you should configure an additional Port Forwarding rule. Media players like VLC use the '''RTSP''' protocol. You can check the RTSP port in the camera's WebUI (as discussed in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article), but the RTSP default port is always '''554''' and there is no need to change it since by default the router doesn't use this port for any of its services (unless you use for some custom configuration. In that case, change the default RTSP port). So, once again make up a custom name for a new rule and set the following parameters:

** External port(s): '''554''' (camera's RTSP port)

** Internal IP: '''192.168.1.64''' (camera's IP as set in the [[Hikvision:_remote_camera_access#Camera.27s_Web_User_Interface_.28WebUI.29|3.2]] section of this article)

----

* Don't forget to click '''Add''' after you've made the changes. After you have added the new rule, you will redirected to that rule's configuration window. Everything should already be in order so just click '''Save''' and your rule will be created. The new rule will appear at the bottom of the '''Port Forwarding Rules''' list, where you can check its status and make additional configurations if need be:

'''FINAL NOTE''': as you can see, once you add the new rule, it is already enabled and ready for use. From this point no more additional configurations are required, as your remote camera monitoring configuration is fully set up. Unless you want to set up Dynamic DNS for your router, you can skip to the '''[[#Testing_the_set_up|Testing the set up]]''' part of this guide.

To test the configuration via web browser, simply enter the router's WAN IP address into the URL field of the browser but add a colon (:) and the HTTP port number at the end like so:

Don't forget to replace the parameters with those relevant to your own configuration.

The browser we'll be using for this example is Microsoft's '''Internet Explorer'''. To reach the cameras WebUI, enter the router's WAN IP address into the URL field of the browser but add a colon (:) and the HTTP port number at the end like so:

Don't forget to replace the parameters with those relevant to your own configuration.

As mentioned in the introduction to this article, the configurations described here apply to the Hikvision DS-2CD2332-I camera. While that is true, the basic principles used to achieve this configuration should still apply to other products as well. For example, in order to achieve remote access, the configuration from the router's side will be practically identical and only things like IP addresses and port number should differ. From the camera's side, the User Interface may be different but the configuration parameters should remain the same.

==External links==

https://www.videolan.org/vlc/download-windows.html - VLC player download