Link to home
Start Free TrialLog in
Avatar of georgopanos
georgopanosFlag for United States of America

asked on

remote connection to hardware without static ip or access to the router

I have a situation which I have a piece of hardware (an intercom system) that I need access to remotely. I want to use some type of wireless bridge to connect the unit which is hard wired to an internet connection in the building. I do not have access to the router to open ports up and it does not have a static IP. I want to be able to access this unit remotely. Any ideas?
Avatar of 65td
65td
Flag of Canada image

Is the remote system a pc?
What OS is being used?

Can you obtain the MAC address of the box?
Avatar of georgopanos

ASKER

the intercoms is a web interface an do would access's it via pc

the Mac of the router ?
MAC of the intercom system.

But even then, who controls the network? There would be a few ways to tackle the issue, but it would be ideal to have whoever runs the network involved.
You do need access to the internet endpoint (router/firewall) to get from the outside to the inside.
Avatar of noci
noci

And do it in such a way not the whole internet can access  your system.
So you need some filters on allowed sources.

Or ideally you need a VPN between two sites.
Systems with dynamic IP addresses can mostly be helped with some dyndns.com like solution.
ASKER CERTIFIED SOLUTION
Avatar of Member_2_231077
Member_2_231077

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
is it possible to use the ipsec protocol to gain access to the network, kind of like using netcat for a reverse shell?
Yes/No...
Yes: IPSEC is a VPN technology. As such you can connect to a remote site confidentially and use internal addresses. (site -> site tunnel).
       So it does provide security.
No: netcat is an application that sits in between 2 applications (proxy), IPSEC is networking technology.
       in stead of netcat possibly ssh (if the target name is known through dyndns), can be made usable to have confidentiality back.
I think the simple solution is the one above a micro PC with teamviewer on it.

thanks