IP and Port numbering address system

[EarlT 0]

I posted an example in your other thread. I have a D-Link DIR-655 that allows port mapping under Virtual Servers.

[Soundy 1]

Actually only necessary if the router doesn't properly support port forwarding. One that does will allow you to forward one outside port to a different inside port - for example, assuming the cameras use port 80 internally, you could have the router forward port 11111 on the WAN to port 80 at 192.168.0.111; port 11112 on the WAN to port 80 at 192.168.0.112, and so on.

 

What are examples of routers that support this feature? Is this commonly supported? I don't think this is supported on the Netgear FVS328 and other Netgear routers.

 

Best,

Christopher

The vast majority of routers I've used support this... only some old cheap ones I've seen that didn't. Couldn't tell you any makes or models offhand, other than maybe a couple of old Linksys 802.11b models.

 

Looked up the manual for the FVS328, looks like it doesn't do it.

[ssmith10pn 0]

I didn't go through every sentence of this thread so if it was already mentioned I apologize.

 

 

Instead of going through that port numbering and forwarding headache why not use a router with built in VPN server so you can just jump directly onto that network and not port forwarding is needed?

[cglaeser 0]

Instead of going through that port numbering and forwarding headache why not use a router with built in VPN server so you can just jump directly onto that network and not port forwarding is needed?

 

I'm trying to use third-party camera viewers that don't use VPN. Is it possible to use VPN when only the router knows about the tunnel?

 

Best,

Christopher

[thewireguys 3]

Instead of going through that port numbering and forwarding headache why not use a router with built in VPN server so you can just jump directly onto that network and not port forwarding is needed?

 

I'm trying to use third-party camera viewers that don't use VPN. Is it possible to use VPN when only the router knows about the tunnel?

 

Best,

Christopher

 

What device are you using to view the cameras with? if it is an Ipad they have VPN support.

Edited July 17, 2011 by Guest

[cglaeser 0]

What device are you using to view that cameras? if it is an Ipad they have VPN support.

 

iPhone and iPad. Is it possible to set up VPN on the iPad so that generic applications go through the tunnel?

 

Best,

Christopher

[Soundy 1]

If you're using your iPad/iPhone via WiFi, you can use a router with DD-WRT on your "home" end; it includes a VPN client that can connect out and create the VPN tunnel, and all devices on that WLAN will then have access to the connection.

[LC475 0]

If you're building VPNs across multiple sites, one thing to keep in mind is IP address conflicts. You can't have 20 192.168.1.101s. So, you might change the subnet for each site, e.g. 192.168.2.xxx for one site, 192.168.3.xxx for the next, 4.xxx for the next.

 

Other than that, your systematic port numbering is good, always best to keep things organized, and as everyone told you, put the ports in the router, not in the cameras themselves.

 

Officially, you should use ports 49152–65535 for custom or private purposes like this. That's best practice.

 

For practical purposes, it won't usually cause any problem to use most anything above 1024. Definitely never use any below 1024. There don't appear to be any registered ports in the low 11,000s, unless you have a two hundred camera installation, then you'll run into "Savage:Battle for Newerth" Server Hosting (http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers ). If you are not currently engaged in the battle for Newerth, however, this will not be cause for great alarm.