RT-AC68U & IP Cameras

[M_M]

The AC68U can hopefully replace my old Cisco router as well as a Cisco access point . The main reason for the change is the insufficient range of the Cisco as well as the "problem" it has with my wireless IP cameras. Without boring you with the details, I can quickly say that for no reason the Cisco drops connection with the cameras. I'm assuming it is not the range of the Cisco, because I have a Cisco access point that is 15ft from one of the cameras and it is not the cameras because as soon as I reboot the access point or the router the connection with the cameras is reestablished. I'm hoping it is due to the age / incompatibility of the router with the cameras - it is an old WRT350N router and WAP610N access point.

My question is about setting up the Asus, so it provides a stable connection with my cameras. What is the best or proper way to do this?

The way I do it now is with static IPs for the cameras and port forwarding, so I can access them remotely.

I know a little bit about networking, as I was able to figure it out with the Cisco, but of course not nearly as much as most of you guys here, so please be gentle.
Thanks a lot!

 

[L&LD]

I don't think you have a question. You just need the hardware to setup.

 

[M_M]

The AC68U is supposed to be delivered tomorrow - are you saying that it will solve my problem even if I set it up the same way as the old one?

 

[L&LD]

As you hinted; the old equipment is old. Only thing you can do is try.

 

[cdikland]

The way I do it now is with static IPs for the cameras and port forwarding, so I can access them remotely.

That is basically all there is to it and will work fine for you. There are other option you can explore as you become familiar with the router. For instance, as opposed to you assigning a static IP to each camera, it can assign a "static" IP to each device based on the device's MAC address. I add a name along with this assignment so that when I look at the network map I can easily recognize what is what.

Recently I scrapped the Port Forwarding in favor of an OpenVPN setup on the router. Very easy to setup but you will need (easily available and free) client software on your mobile(s) and/or PC. I now have to log in remotely to see my cameras making each is less visible to undesirables out in the big bad WAN

 

[M_M]

Thank you guys!

cdikland,

When I was reading the manual, I did notice this neat feature (static IP assignment based on MAC) and I intend to use it.
Now, about your OpenVPN - when you set it up, how do you access the cameras on a mobile? Right now I use a really good app (IP Cam Viewer) that allows me to view all cameras at once or one at a time. With a VPN client, I will probably not be able to use it and without constantly running a VPN server to go through, do you access them one at a time with the client software or do you bypass the client and setup all your mobile connections to your VPN? If you do the latter, how is your 3G/4G/WiFi speed? Thanks again!

 

[cdikland]

I use IP Cam Viewer as well. Before we get to that however...
You need to either assign a static IP address for each camera either via the camera setup/configuration page or via the router Lan/DHCP Server/Manually Assigned IP around the DHCP list. I chose the latter but I cant give you a good reason why other than I have a COMPLETE list on my router of all the local devices that connect to my router. Either way works though .
As well, you need to assign an unique port number for each camera. Again, can be done either within Camera setting/configuration page or router Port Forwarding. I prefer the former thereby not opening any ports on the router.


Back to Ip Cam Viewer,,
When you set up a camera (Manage Cameras) for the host Address enter the static IP address you assigned to the camera in the box labelled "Host/IP" In the box HTTP Port enter the port number. For example. My Foscam in the LR is assigned 192.168.1.242 and the port is 50002. Once you added this info, test the config by pressing the test button. If you are connected to the LAN you should get a Success message. If you are not on the LAN it will fail. In other words, you can not access the cameras remotely. So....

To view my cameras when I am away I log into mu OpenVPN server. Once I am logged on I start up IP Camera Viewer voila.... magic. Remote access to my cameras without having remote access enabled

Why OpenVPN?? I know next to nothing about the different options other than readin one was more secure than the other. Setup was pretty simple and it worked first time I tried it. Follow the instruction provided on the Server page on how to connect to the server. Be sure to add a username/password to the OpenVPN server

I think that is it for now. Just PM me if you need more info.

 

[cdikland]

I forgot to include that besides accessing the web cam via ip camera viewer you can also access the camera setup/config page. My Foscam can be access by enter 192.168.1.242:50002 into the browser address box

 

[M_M]

cdikland,

Thanks again for your help! This helps a lot, but I still have a couple questions…

First, does your camera require only one port to operate? I'm asking because it seems that my cameras require 2 (one for Web and one for mjpeg). Actually, there are 4 port settings within the configuration page:
IP Ports (Web)
IP Ports (RTSP)
mjpeg
3gp
The cameras are set to transmit high speed mjpgs, so I have to set HTTP and mjpeg ports in order for it to work. I guess, if I were using MPEG, I would have to set RTSP instead of mjpeg - correct?

In any case, with the two ports specified within the camera configuration pages and enabled forwarding of the same ports to the camera IPs on the router, I can access the cameras remotely without any problems.

Now when I enable VPN:

If I understand you correctly, I could disable port forwarding on the router and keep the set ports on the camera configuration pages and I should be able to access them remotely using VPN connection on the mobile? Does this mean that all ports on the LAN side are always open and when you enable port forwarding, you open specific ports only from the WAN side? The reason I'm asking is that (to make it simple, without VPN enabled) when I set "Enable Port Forwarding" to "No" on the router, I can no longer to access the cameras from a computer that is on the LAN. The computer is actually connected to the router via ethernet cable. In other words, when I try to access a camera using its static IP followed by its port (192.XXX.X.XXX:XX), the camera interface never loads.

Am I not understanding it correctly?

Thanks again!!!

 

[cdikland]

Now when I enable VPN:

If I understand you correctly, I could disable port forwarding on the router and keep the set ports on the camera configuration pages and I should be able to access them remotely using VPN connection on the mobile?

Not sure I understand all these different ports you are required to provide for your cameras. I only set 1- HTTP. That said... if you are only going to access the cameras on LAN only just set the PORT box in the cameras config/setup page AND the IP cam Viewer app to 80.

Does this mean that all ports on the LAN side are always open and when you enable port forwarding, you open specific ports only from the WAN side? The reason I'm asking is that (to make it simple, without VPN enabled) when I set "Enable Port Forwarding" to "No" on the router, I can no longer to access the cameras from a computer that is on the LAN. The computer is actually connected to the router via ethernet cable. In other words, when I try to access a camera using its static IP followed by its port (192.XXX.X.XXX:XX), the camera interface never loads.

My previous post probably added to your confusion Forget about port forwarding. You don't need it. change all your cameras port settings to 80. now to access the cameras setup page from the lan (or when logged on to you OpenVPN Server with your mobile) enter the static IP into the web browser address bar. To access the cameras via Ip Cam Viewer, enter 80 for HTTP port. As for your PC that is on the same LAN, just enter the static IP of the camera.


BTW: I have my OpenVPN server running all the time. Remembering to turn it on when ever I leave ain't gonna happen. As for the mobile, I use an android running OpenVPN for Android. The android app recommended on the routers VPN server setup page did not work well for m

 

[shortcut3d]

I second the use of OpenVPN. I use it to access all my local network resources and provide remote support when traveling away from the family. It's much better from a security perspective to have only one port open to a secure service.

I am also planning to use the RT-AC68U for Wireless-N IP Cameras. I am looking to create a separate SSID for the cameras. The unknown for me is can I setup a wireless bridge or backhaul on 5GHz and still have the 2.4GHz AP.

 

[M_M]

Thanks again cdikland!

Are there any conflicts when you use and view several cameras on the same port simultaneously?

I will be running VPN on my phone and tablet all the time, just like you, and I imagine it might be quite taxing on the router, so how does this affect its performance? I'm asking, because I'm running IPTV all the time and this in itself is quite demanding on the router and since the maximum buffer is only 2s, I'm concerned.

It would be a very lucky coincidence if you had IPTV, but have you noticed any slowdowns or hiccups with your setup when your VPN is being used?

Are there any other good ways to make the IP cams secure?

 

[pkbristol]

Use the asus built in DDNS hosting.
Here's how

https://www.youtube.com/watch?v=F2NjKkXW30Y

Then use tinycam monitor on your android devices to access the cameras via the hostname.

I've got loads of experience with this, see my signature.
I've also set up many ip camera cctv systems for other people, always using asus routers, RT-N66 and asus hosting.

Paul.

 

[M_M]

Paul,

Why is DDNS more secure? Is it because I would be routed through Asus servers, instead of connecting with my router directly? I would think that a company like Asus would attract more "interest" than a simple end user. I would appreciate if you could elaborate on this. Thanks for the video!

 

[pkbristol]

I don't know if it's more secure to use asus DDNS, the reason i use the asus hosting is so that i can access my android ip cameras without having to worry about my dynamic ip address changing. The android cameras obviously don't come with manufacturers hosting like my foscam cameras, although the foscams are now also hosted by asus.
I also give all cameras (foscam and android) a static addresses using the router.

Paul.

 

[brian]

Hi, i need help. i just got 4 wireless ip cameras that i want to set up in order to receive alerts and be able to view them from my android devices. can any one help me please. i to have the ASUS RT-AC68R Router.
thanks.