Port Forwarding ViewQuest Issues

[IBNU12]

I've been having trouble trying to port forward my IP camera. I need to be able to access the RTTSP externally and I know that I need to port forward it so that it can be accessed from an external network. My home wifi-setup so that I have a Xiaomi Me router that's connected to an ONT box with Viewquest as my IP.

whenever I set up the port forwarding on my Xiaomi router for the same port as my vision ip camera I fail to access it whenver I use a port scanning tool. It always tells me that the port is closed and I am unable to use the rttsp stream in an external network

can someone help me figure out why this is happening ?

 

[bert64]

Many VQ plans are behind CGNAT, so you cannot forward ports... What is the WAN address reported by your router? (by this I mean the IP reported by the router itself, not one reported by viewing an external website - if the two addresses differ then you probably have CGNAT).

 

[xonix]

CGNAT
- may be shared or unique ; but private wan IP ≠ external wan IP
- hence port forwarding fails

- private wan IP = external wan IP
- port forwarding success

 

[Apex]

New sign up and customer who recontract customer will no longer have a public ip.

Like what the others shares. Vq moving to CGNAT design. So might be the reason why you can't access.

Does your plan come with a static ip?

 

[IBNU12]

Many VQ plans are behind CGNAT, so you cannot forward ports... What is the WAN address reported by your router? (by this I mean the IP reported by the router itself, not one reported by viewing an external website - if the two addresses differ then you probably have CGNAT).

This appears to be the issue. The router IP address shown by the router as it's WAN is different from my public IP address reported by a website. It's 192.168.1.2 which seems to suggest it's connected to a local network. Thanks so much.

Is there any solution to this issue ? Would port forwarding be possible using a 4g internet question ?

 

[TanKianW]

This appears to be the issue. The router IP address shown by the router as it's WAN is different from my public IP address reported by a website. It's 192.168.1.2 which seems to suggest it's connected to a local network. Thanks so much.

Is there any solution to this issue ? Would port forwarding be possible using a 4g internet question ?

For consideration. You can:

1. Negotiate (pay extra) with your ISP for a static public IP
2. Change to an ISP which is not using CGNAT
3. Deploy a VPS externally so you could tunnel in
4. Subscribe to a tunnel service
5. Change to a CCTV system that comes with cloud services (Maybe Arlo?)

I will try Option 1 first. If contract ending, I go with Option 2. Option 5 will require overhaul your CCTV. Option 3 should be for the techies. Not techie enough to deploy Option 3, then check out Option 4.

 

[IBNU12]

For consideration. You can:

1. Negotiate (pay extra) with your ISP for a static public IP
2. Change to an ISP which is not using CGNAT
3. Deploy a VPS externally so you could tunnel in
4. Subscribe to a tunnel service
5. Change to a CCTV system that comes with cloud services (Maybe Arlo?)

I will try Option 1 first. If contract ending, I go with Option 2. Option 5 will require overhaul your CCTV. Option 3 should be for the techies. Not techie enough to deploy Option 3, then check out Option 4.

Thanks. out of curosity how would I go about using a subscribed tunnel service for an ip camera. Do you have good links for how I can do it ?

 

[TanKianW]

Thanks. out of curosity how would I go about using a subscribed tunnel service for an ip camera. Do you have good links for how I can do it ?

Not sure if it work for your use case. You can check out: https://portmap.io/

 

[xiaofan]

This appears to be the issue. The router IP address shown by the router as it's WAN is different from my public IP address reported by a website. It's 192.168.1.2 which seems to suggest it's connected to a local network. Thanks so much.

Is there any solution to this issue ? Would port forwarding be possible using a 4g internet question ?

Just pay for static IP at S$2.99 per month since you are using Viewquest.
https://viewqwest.com/faq-articles/what-is-a-static-ip-and-why-do-i-need-ithttps://viewqwest.com/faq-articles/...outers-what-ip-will-i-get-for-no-router-plans

 

[IBNU12]

Not sure if it work for your use case. You can check out:

Thanks. I'm wondering if there are any mobile networks service providers that can give me a network I can port forward?

Just pay for static IP at S$2.99 per month since you are using Viewquest.

Well the issue is that I want to be able to port forward from a mobile 4g network.

 

[xiaofan]

Thanks. I'm wondering if there are any mobile networks service providers that can give me a network I can port forward?
Well the issue is that I want to be able to port forward from a mobile 4g network.

In that case, change your IP camera solution. I believe none if the mobile network here offers public IPv4 address.

 

[IBNU12]

In that case, change your IP camera solution. I believe none if the mobile network here offers public IPv4 address.

Are there any good IP cameras that do offer cloud-based uploading and remote access ?

 

[bert64]

Thanks. I'm wondering if there are any mobile networks service providers that can give me a network I can port forward?

Well the issue is that I want to be able to port forward from a mobile 4g network.

All mobile networks also use CGNAT for IPv4.

You can do it with IPv6 if your camera supports it directly (or if a router can proxy from IPv6 to the camera). As far as i know only M1 are providing public IPv6 on mobile connections, i believe TPG also provide public IPv6 but they blocked inbound connections by default last time i checked (last year, might have changed now). Starhub and Singtel still have legacy networks without IPv6 support.

 

[bert64]

Thanks. out of curosity how would I go about using a subscribed tunnel service for an ip camera. Do you have good links for how I can do it ?

It's unlikely the camera would support this directly, so you'd probably need to configure a tunnel on another device (possibly the router if capable) and setup port forwarding.

 

[Apex]

All mobile networks also use CGNAT for IPv4.

You can do it with IPv6 if your camera supports it directly (or if a router can proxy from IPv6 to the camera). As far as i know only M1 are providing public IPv6 on mobile connections, i believe TPG also provide public IPv6 but they blocked inbound connections by default last time i checked (last year, might have changed now). Starhub and Singtel still have legacy networks without IPv6 support.

Singtel mobile still provide IPv4 public address. But this is a very old sim card or plan that I'm using.

*Please ignore the watermark as this is due to beta firmware from my TPlink 4G router

 

[loupgarou2]

I have a tp link camera. I did not setup any port forwarding. the app can view the camera from anywhere. (even though it doesn't even ask for public ip. it only has an lan ip via wifi)

I believe it also has cloud upload capabilities. maybe you can research this camera.
https://www.tp-link.com/sg/tapocare/#table-f

 

[bert64]

I have a tp link camera. I did not setup any port forwarding. the app can view the camera from anywhere. (even though it doesn't even ask for public ip. it only has an lan ip via wifi)

I believe it also has cloud upload capabilities. maybe you can research this camera.
https://www.tp-link.com/sg/tapocare/#table-f

Cameras typically do that by sending the traffic via a server operated by the manufacturer, which is therefore entirely outside of your control. You have to consider:

1, do you trust the manufacturer and their security controls/policies?
2, how long do you expect the manufacturer to continue running the service for?

 

[loupgarou2]

I think that applies to any other camera. eg: a port forwarded camera might have security issues that may not be updated leading to a lateral hack in the network.

 

[bert64]

I think that applies to any other camera. eg: a port forwarded camera might have security issues that may not be updated leading to a lateral hack in the network.

Yes, but if it's an open port then you can control access to it (eg firewall rules, run your own vpn endpoint, run it through a reverse proxy or WAF etc).

If it depends on an external server then you are beholden to the operator of that server and have no real control over it yourself.

 

[loupgarou2]

the tapo dlink cameras also have rtsp stream and onvif .

you can use eg: synology nas/qnas app both have Surveillance Station app to record the camera and stream it to wherever you please. I think most other commercial nas like asustor etc also have equivalent.

(either way, better check for compatibilty between your camera and nas solution)

(but you probably still need a static/private ip for it still.