Help Setup B315 with TPlink for DVR Viewing

[Johnny_Q]

Hi all
Please help me here trying to connect to my DVR externally

On the B315 I have switched DHCP off and enables DMZ to 192.168.8.2 as per below


TPlink Wan setup as below


I have then created the virtual server and port forwarding as below


DNYDNS on TPLink is updating the IP and the DVR has a fixed IP.

I can connect to DVR on local network but cannot connect from externally
If I enable DMZ on the TPlink I can connect to DVR from outside but cannot get video feed it shows connect but no video image.

So from my limited understand I have a problem with my port forwarding ?

Assistance is much appreciated

Thanks

 

[sajunky]

I have no experience with TPLink, but general rule is to not mix Virtual Server with DMZ to the same IP address. It can trigger bugs in firmware. If you enable DMZ, disable the other one.

The same could be with mixing Virtual Server with Port Triggering, but not sure. Post your requirements for your DVR.

You didn't mention about connecting B315 LAN port to TPLink WAN port, but it is obvious. What is your Telkom package? Telkom blocks some ports on contracts. By example T&C on unlimited package:

11. A subscriber may not provide network services from their account (for example, you may not use your
account to operate as an FTP server)

To be sure verify T&C or use prepaid SIM.

 

[Johnny_Q]

Thanks for the reply

I had virtual server setup as above links and I couldn't connect remotely. I then switched that off and enabled DMZ which allowed me to connect remotely but no video image. This is all done on the TPLink router


So you saying I shouldn't have the virtual server and port triggering on together as per my above setup?

DVR requirement is to be able to view it remotely. I am using DYNdns to update IP

Sorry correct B315 lan port is connected to TPlink Wan port with static IP

Im on the Telkom LTE uncapped package.


What am I doing wrong with this setup

 

[sajunky]

So you saying I shouldn't have the virtual server and port triggering on together as per my above setup?

Correct. If you enable DMZ, you should disable corresponding entries on the Virtual Server which point to the same IP address. But I doubt it is the problem.

Im on the Telkom LTE uncapped package.


What am I doing wrong with this setup

I think it's Telkom, not you. I refered to #11 of your T&C. They say they block ftp port (typical 21), check if they block any other ports you need.

Double check which ports must be opened for your DVR, then test whether these ports are opened.

 

[Johnny_Q]

its port 554 and with port checker it says port is open

 

[sajunky]

its port 554 and with port checker it says port is open

If it is entire truth, then why do you trigger ports 555-557?

Secong question. How do you view DVR footage - from Web browser?

 

[Johnny_Q]

hi

As per below screenshot of DVR setup it shows ports 554 - 558 so that is why I did the port forward that way.


I can view on web browser but also use the Samsung smart viewer

 

[sajunky]

As per below screenshot of DVR setup it shows ports 554 - 558 so that is why I did the port forward that way.

Excactly. This is why DMZ on TPLink gives connection and port forwarding not. To get port forwarding working properly you have to forward all 5 ports (554-558). Remove Port Triggering entries, as this option is only needed when your PVR is on dynamic IP. Use Virtual Server for forwarding or DMZ (port forwarding is preferable in this case), but not both simultaneously. Finally run port checker to verify whether all 5 ports are opened indeed.

Now about not getting video image. Did you check that you have appropriate codec installed on the remote client? You can also change codec type on your PVR Web Viewer settings page.

Other possibility is to change Webviewer port option to some non-standard one. When you change default port 80 (to 9000 by example), you will be accessing your device by the URL appended by colon and port number 9000).

In the case of Telkom filtering Web pages, you have a possibility to switch Secure Video Transmission option 'on' and access Web page by https://....... on the default port 80. I am looking forward on feedback on this matter.

Lastly I see that your PVR model is Samsung SRD-1650D. This PVR can be connected directly to Huawei, as it has internal DDNS support. It will simplify configuration and remove one extra NAT from the path.

 

[Johnny_Q]

Ok so I have done the following
removed port triggering entries
updated virtual server to include ports 554 - 558

ran port checker and came up with 557 not open all the others where fine.

Was still not enable to connect remotely.

I then changed DVR port number 9000, and couldn't even connect on LAN.

Will have to reverse this later when I get home as I changed the DVR port using teamviewer on LAN PC.

Will report back later

 

[sajunky]

For the start change ports to defaults (4520-4524) in DVR Network -> Connection Mode
Then the same on TPLink ad run port check. Repeat if port check is unsuccessful. DVR allows to adjust port numbers in increments of 5. Yes, I downloaded 20MB manual.

 

[Johnny_Q]

Hi sorry for the delayed response been busy with work.

Ok so I changed the port range and every range I select the 4th port is always blocked
eg 4520 - 4524 - 4523 is blocked
4530 - 4534 - 4533 is blocked

So don't know what else do.

Now this setup worked perfectly with my ADSL for the last 2 years. So not sure if this anything to do with LTE?

thanks

 

[Johnny_Q]

Below is the dvr network protocol does it all look fine ?

 

[Johnny_Q]

In the case of Telkom filtering Web pages, you have a possibility to switch Secure Video Transmission option 'on' and access Web page by https://....... on the default port 80. I am looking forward on feedback on this matter.
.

Ok so I switched on secure video transmission and get the below on the LAN


now looking at the URl is shows port 5528 which is the exact port that is blocked with port checker. Not sure what to make of this now?

Even more confused

 

[sajunky]

Glad you got it working!

EDIT (removed)

On the other note, I was puzzled about always blocked 4th port. It must be a DVR feature. By example if DVR normally do not respond to this port unless external connection is made to the other port, port scan will show that port is blocked. Once https is working, you don't have to worry about.

 

[Johnny_Q]

Hi Sajunky

Only working on LAN, still canntot connect remotely

 

[sajunky]

Sorry, I missed it was on the LAN. Check if you have still certificate errors when connecting using direct cable connection or ordinary switch.

Other than certificate error it seems a normal redirection. Fourth port is used which is not normally open on the DVR. When you run port scan while having secure conncetion over the LAN, it should be open now.

 

[sajunky]

Distraction. All above do not bring you any closer.

To progress on the matter, check whether you get streaming as suggested already:

Lastly I see that your PVR model is Samsung SRD-1650D. This PVR can be connected directly to Huawei, as it has internal DDNS support. It will simplify configuration and remove one extra NAT from the path.

If still doesn't work, then try prepaid Telkom SIM which is unrestricted by dafault.