Link to home
Create AccountLog in
Networking

Networking

--

Questions

--

Followers

Top Experts

Avatar of PigoMan
PigoMan🇺🇸

Security Cameras, Port Forwarding Issue
Hello Everyone!

We had some security cameras installed and the installer asked me to open port 8000 for the dvr.  We have a Sonicwall 1260 Pro and I followed the instructions for port forwarding.  I created the service for both TCP/UDP, port 8000 and then created the group.  I used the public server wizard to allow public access to the camera ip.  After everything was complete I used the site, http://www.yougetsignal.com/, to check if port 8000 was open.  Unfortunately, the port is still closed.  I'm stuck figuring what I could be doing wrong.  We do have 2 static ips for the site.  The other ip is used for the fax machine line.  i don't know if this could cause the problem.  Any help is appreciated.

Router: SonicWall 1260 Pro
ISP: Cox
WAN: 72.205.202.66
Camera IP: 192.168.168.62
Port: 8000
img.png

Zero AI Policy

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


Avatar of Jackie ManJackie Man🇭🇰

We do have 2 static ips for the site.
<- It is the problem.

Your broadband Internet uses one static ip and you cannot use it for port forwarding.

You need to port forward the other ip is used for the fax machine line to another port not used by the fax machine line.

Avatar of masnrockmasnrock🇺🇸

Having 2 static IP addresses isn't a problem as long as your port forwarding rule applies to the correct static IP address. So the question is which IP address your port forward rule is tied to.

Camera IP: 192.168.168.62
Did you mean DVR IP? If this is the IP of one of the cameras, there's your problem. The rule should be pointing to the DVR's IP address. What type of DVR do you have anyway?

But you might want to be sure that the port number is correct, as well as the rule itself. Try to connect to http://dvripaddress:8000 from inside the network and let us know whether you are able to access the DVR. If not, then you were given the incorrect port number to forward.

Avatar of Jackie ManJackie Man🇭🇰

In my office, I have more than five real IP address and one of them is under the control of our ISP and I have no control on it as it is the IP address for our broadband router and the firewall from our ISP will block most of the ports to safeguard the broadband Internet under the SLA.

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


ASKER CERTIFIED SOLUTION
Avatar of Davis McCarnDavis McCarn🇺🇸

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Create Account

Avatar of masnrockmasnrock🇺🇸

I assume you ran that test at home. Could you please show the WAN interface settings on your Sonicwall, along with NAT policies and access rules?

But also, try connecting to the DVR as I recommended earlier.

Avatar of PigoManPigoMan🇺🇸

ASKER

@masnrock yes I meant the dvr IP.  Model: Honeywell HRG161.  I asked the installer if 8000 was the correct port and his response was "8000 on internal, external can be whatever you want"  I tried 192.168.168.62:8000 from inside the network this morning but a page did not open.  Howver, the camera web interface works onsite.  I attached some screen shots of the settings. I will tke pictures of the WAN interface settings, along with NAT policies and access rules and upload.

@Jackie Man Cox is our ISP.  I'll call them to see of port 8000 is blocked.

@Davis McCarn our Cox modem model is a Aris Touchstone SB6183
1.JPG
2.JPG
3.JPG

Avatar of masnrockmasnrock🇺🇸

I tried 192.168.168.62:8000 from inside the network this morning but a page did not open.
That's most likely your problem.

Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


Avatar of Jackie ManJackie Man🇭🇰

Try 192.168.168.62:8001 from inside the network

Avatar of masnrockmasnrock🇺🇸

Try 192.168.168.62 (don't add a port number), and see if that works. With your camera system, 80 is the default port for web browser access to your DVR. 8000 is for software based.

https://www.security.honeywell.com/uk/documents/HRG-Performance-Series-DVR-User-Guide-PAL.pdf
Looking at Page 89.

Avatar of Jackie ManJackie Man🇭🇰

Only port 8060 is open within the ports from 8000 to 8080 according to online port scanning tool for your WAN IP address.

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


Avatar of Jackie ManJackie Man🇭🇰

Port 8060 should be the remote admin port for your ISP.

Avatar of masnrockmasnrock🇺🇸

What is port 8060 in use for? Also, are you able to get into the admin settings of your DVR? If so, you might want to go in and check what the server port for the DVR is.

Avatar of Davis McCarnDavis McCarn🇺🇸

The second picture says you should use http://192.168.168.62:8001 for the http access; but, it also shows 192.168.168.168 as the gateway.  Is that the ip address of the sonicwall?

Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


Avatar of masnrockmasnrock🇺🇸

So the answer depends on what you want to forward, which I assume is the HTTP port. And Davis is right based on your screenshots: you should be forwarding 8001, not 8000.

Avatar of Jackie ManJackie Man🇭🇰

But, port 8001 is blocked.

Avatar of masnrockmasnrock🇺🇸

Correct, but that would be because the technician had said to forward port 8000.

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


Avatar of PigoManPigoMan🇺🇸

ASKER

@Davis McCarn yes, 192.168.168.168 is the IP address of the sonicwall

Avatar of PigoManPigoMan🇺🇸

ASKER

@masnrock yes, the technician said to forward 8000

Avatar of Jackie ManJackie Man🇭🇰

"8000 on internal, external can be whatever you want"

The above statement is only correct if you are using a business broadband service. For residential broadband service, only a few ports are open.

Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


SOLUTION
Avatar of masnrockmasnrock🇺🇸

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

Avatar of Davis McCarnDavis McCarn🇺🇸

Your Aris device does seem to be only a modem:
https://www.timewarnercable.com/content/dam/residential/pdfs/support/internet/ModemUserGuides/motorola_sb6183_ug.pdf
But; until you can get it working internally, there is no point in trying to setup WAN access.  And, as another note, remote viewing of a security camera system will use a huge percentage of your outbound bandwidth and other users will notice the internet is a lot slower because of that.

Avatar of Jackie ManJackie Man🇭🇰

Sorry. I have misinterpreted the report. Port 8060 is closed also.

The report of port scans are as follows.

SOLUTION
Avatar of Jackie ManJackie Man🇭🇰

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.

Avatar of PigoManPigoMan🇺🇸

ASKER

Hi All,

I called our ISP and asked about closed ports.  They informed me that they don't close ports.  They also said that having 2 static IPs shouldn't cause a problem.  I'm pretty lost here.  We have the same router at a different location and forwarding ports for security cameras was never a problem.  I attached snapshots of the NAT Policy Settings, Address Object Settings, and the Services settings for port 8000.

On another note I used yougetsignal.com to check if any other ports on the network are open such as 80 and 3389 and they're closed too.  The only one that seems to be open is 443.  I also tried to plug in a Linksys EA4500 and did the port forward for 8000 and still no luck.
IMG_2798.JPG
IMG_2799.JPG
IMG_2800.JPG

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


Avatar of masnrockmasnrock🇺🇸

What about the other NAT rule? The one coming from the outside and going to your DVR

Have you tried connecting to your system using the software?

Avatar of PigoManPigoMan🇺🇸

ASKER

The tech installed the honeywell software on a workstation and we are able to view the cameras.
IMG_2801.JPG

Avatar of Jackie ManJackie Man🇭🇰

Of course you can view the camera within the local network.

The problem is whether you have the exclusive use of the fixed IP address of 72.205.202.66.

Normally, if it is an residential broadband service, customers do not have exclusive use of the assigned fixed IP address.

Have you looked into the paper of your contract?

Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.


Avatar of masnrockmasnrock🇺🇸

There is one simple question that should be answered: what exactly are you trying to do? I am assuming that you want to be able to view the cameras remotely via browser.

Avatar of Jackie ManJackie Man🇭🇰

My wild guess is that 72.205.202.66 is the IP address assigned to the Cox modem by the ISP.

In such case, either try to use the other IP address or use a uPnP IP camera.

Avatar of Davis McCarnDavis McCarn🇺🇸

"The second picture says you should use http://192.168.168.62:8001 for the http access" and, until that works from inside the network which means a PC with an ip of 192.168.168.xxx, you won't ever get it to work remotely.  When you go to that url, it should prompt you for a login name and a password; but, most security camera systems also need an activex control installed before they work correctly.

Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.


Avatar of Jackie ManJackie Man🇭🇰

but, most security camera systems also need an activex control installed before they work correctly.

Activex is required for internet explorer only

Avatar of PigoManPigoMan🇺🇸

ASKER

Sorry for the late reply and that you all for your suggestions.  I ended up calling Cox to swap out the modem and factory resetting the SonicWall unit.  After all this everything worked out fine and I was able to open up port 8000 without any issues.

Avatar of Davis McCarnDavis McCarn🇺🇸

Please choose the best answers and close this question, OK?

Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.

Networking

Networking

--

Questions

--

Followers

Top Experts

Networking is the process of connecting computing devices, peripherals and terminals together through a system that uses wiring, cabling or radio waves that enable their users to communicate, share information and interact over distances. Often associated are issues regarding operating systems, hardware and equipment, cloud and virtual networking, protocols, architecture, storage and management.