14
1 www.observint.com The steps used in this guide reference the common example network diagram shown below. In this example: Routers servicing the LANs are open to the internet through a DSL link, cable modem or other device (not shown). Devices within the LAN are on the same subnet (typical). The actual IP addresses, port numbers and device configuration of your system will likely be different. LAN (Private Network) Router Recorder Computer IP Cam A IP Cam B Internet (Public Network) Alibi Witness smartphone app IP addr: 192.168.1.201 IP addr: 192.168.1.202 IP addr: 192.168.1.113 Uplink port IP addr: 72.177.29.93 Default Gateway IP addr: 192.168.1.1 NOTE These procedures assume that the Alibi device you connect to was installed as detailed in the documentation provided with the device and it is configured with static IP devices. Step 1. Determine the IP address and port numbers configured in Alibi devices within a local LAN When a computer is on the same LAN as your Alibi devices, i.e., attached to the same router (see network example above), typically the devices and your computer are assigned to the same Ethernet subnet. And you can easily connect to those devices through an internet browser by using the IP address of the device as the URL. In this procedure, we’ll use the Computer on the same LAN as the security system (see the diagram above) to connect to IP Cam A. 1. To determine the IP addresses of the Alibi devices on your local LAN: a. Install the Alibi Tools Utility on a Microsoft® Windows® computer on the LAN. This software is provided with Alibi IP devices and can be acquired from your Alibi vendor. Follow the installation instructions included in the documentation for the device. b. Open the Alibi Tools Utility application, then double-click on the Discovery Tool icon to open it. ALIBI IP devices can be accessed both locally, within a LAN (local area network), or remotely, such as from the internet, with a computer using an internet browser or with a smartphone using the Alibi Witness application. Normally IP devices installed on a LAN (on a router) are behind a firewall in the router that blocks access by anything outside the LAN. Port forwarding is a technique of configuring the router to open paths (ports) in the firewall through which computers and smartphones outside the LAN firewall can connect to the devices on the LAN. About port forwarding Every device on a LAN can address another device on the LAN using a specific IP (internet protocol) address that uniquely identifies the device. IP addresses (for the commonly used IPV4 standard) are in the format #.#.#.# where each # can range from 0 .. 255. The IP address of each device on a LAN must be unique. Similarly, the IP address (representing a URL, or internet address) of each website on the internet must be unique, so that one program on one device can communicate with a program on another, such as a web browser (at one IP address) and a website (at another IP address). When two devices establish communication between themselves using more than one program, thy can do so by using “ports” in the device’s network interface. A Port is a software constructs that provides a pathway into the device for a specific kind of program communication. Each IP device interface has 65536 ports, numbered 0 .. 65535. Most devices communicate between each other using port 80 (called the HTTP port). Another port frequently used is called the FTP port (port 21 for File Transfer Protocol control). Port numbers in the device can often be changed, but the change must be understood by both devices for communication to be effective. Sophisticated devices, such as Alibi IP devices, communicate with a web browser or smartphone using two programs, a control program (HTTP port, 80 by default, or a Server Port, 8000 by default) and a video streaming program (RTSP, using port 554 or 1050). Port Forwarding is the technique of opening a path through the Router firewall that connects (maps) an inbound router port (outside the firewall, such as on the internet side), to the IP address and port of a device on the LAN, behind the firewall. About this guide This guide includes the following parts: Step 1. Determine the IP address and port numbers configured in Alibi devices within a local LAN This step includes: Determining the IP address of ALIBI IP devices on your local network with ALIBI Power Tools Connecting to an Alibi IP device on the local LAN using a local computer with an internet browser Determining the port numbers used by Alibi recorders and IP cameras on the local LAN Step 2. Configuring the router for remote access to ALIBI devices (port forwarding) This step includes: Using ipconfig to determine the IP address of the router from inside the LAN Using portforward.com to find procedures for opening ports in the firewall (port forwarding) Port forwarding the router Step 3. E XAMPLE: Forwarding ports in the Links ys E1200 router for an Alibi recorder This step uses the procedures in Step 1 and Step 2 in a detailed real-world example. This step reflects the Observint Technologies Port Forwarding video on YouTube.com. Appendix A. EXAMPLE: Port Forwarding for Alibi equipment on an Arris DG1670A router This appendix provides detailed examples of port forwarding multiple devices on the same LAN using alternate port numbers. Port Forwarding for ALIBI™ IP Cameras and Recorders TT ALI Port Forwarding 160205

Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

  • Upload
    others

  • View
    8

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

1 www.observint.com

The steps used in this guide reference the common example network diagram shown below. In this example:

• Routers servicing the LANs are open to the internet through a DSL link, cable modem or other device (not shown). • Devices within the LAN are on the same subnet (typical).

The actual IP addresses, port numbers and device configuration of your system will likely be different.

LAN (Private Network)

Router

Recorder

Computer

IP Cam A

IP Cam B

Internet(Public Network)

Alibi Witness smartphone app

IP addr: 192.168.1.201

IP addr: 192.168.1.202

IP addr: 192.168.1.113

Uplink port IP addr:

72.177.29.93

Default Gateway IP addr: 192.168.1.1

NOTEThese procedures assume that the Alibi device you connect to was installed as detailed in the documentation provided with the device and it is configured with static IP devices.

Step 1. Determine the IP address and port numbers configured in Alibi devices within a local LAN

When a computer is on the same LAN as your Alibi devices, i.e., attached to the same router (see network example above), typically the devices and your computer are assigned to the same Ethernet subnet. And you can easily connect to those devices through an internet browser by using the IP address of the device as the URL. In this procedure, we’ll use the Computer on the same LAN as the security system (see the diagram above) to connect to IP Cam A.

1. To determine the IP addresses of the Alibi devices on your local LAN:

a. Install the Alibi Tools Utility on a Microsoft® Windows® computer on the LAN. This software is provided with Alibi IP devices and can be acquired from your Alibi vendor. Follow the installation instructions included in the documentation for the device.

b. Open the Alibi Tools Utility application, then double-click on the Discovery Tool icon to open it.

ALIBI IP devices can be accessed both locally, within a LAN (local area network), or remotely, such as from the internet, with a computer using an internet browser or with a smartphone using the Alibi Witness application. Normally IP devices installed on a LAN (on a router) are behind a firewall in the router that blocks access by anything outside the LAN. Port forwarding is a technique of configuring the router to open paths (ports) in the firewall through which computers and smartphones outside the LAN firewall can connect to the devices on the LAN.

About port forwarding

Every device on a LAN can address another device on the LAN using a specific IP (internet protocol) address that uniquely identifies the device. IP addresses (for the commonly used IPV4 standard) are in the format #.#.#.# where each # can range from 0 .. 255. The IP address of each device on a LAN must be unique. Similarly, the IP address (representing a URL, or internet address) of each website on the internet must be unique, so that one program on one device can communicate with a program on another, such as a web browser (at one IP address) and a website (at another IP address).

When two devices establish communication between themselves using more than one program, thy can do so by using “ports” in the device’s network interface. A Port is a software constructs that provides a pathway into the device for a specific kind of program communication. Each IP device interface has 65536 ports, numbered 0 .. 65535. Most devices communicate between each other using port 80 (called the HTTP port). Another port frequently used is called the FTP port (port 21 for File Transfer Protocol control). Port numbers in the device can often be changed, but the change must be understood by both devices for communication to be effective. Sophisticated devices, such as Alibi IP devices, communicate with a web browser or smartphone using two programs, a control program (HTTP port, 80 by default, or a Server Port, 8000 by default) and a video streaming program (RTSP, using port 554 or 1050).

Port Forwarding is the technique of opening a path through the Router firewall that connects (maps) an inbound router port (outside the firewall, such as on the internet side), to the IP address and port of a device on the LAN, behind the firewall.

About this guide

This guide includes the following parts:

Step 1. Determine the IP address and port numbers configured in Alibi devices within a local LAN

This step includes:

• Determining the IP address of ALIBI IP devices on your local network with ALIBI Power Tools • Connecting to an Alibi IP device on the local LAN using a local computer with an internet browser• Determining the port numbers used by Alibi recorders and IP cameras on the local LAN

Step 2. Configuring the router for remote access to ALIBI devices (port forwarding)

This step includes:

• Using ipconfig to determine the IP address of the router from inside the LAN• Using portforward.com to find procedures for opening ports in the firewall (port forwarding)• Port forwarding the router

Step 3. EXAMPLE: Forwarding ports in the Linksys E1200 router for an Alibi recorder

This step uses the procedures in Step 1 and Step 2 in a detailed real-world example. This step reflects the Observint Technologies Port Forwarding video on YouTube.com.

Appendix A. EXAMPLE: Port Forwarding for Alibi equipment on an Arris DG1670A router

This appendix provides detailed examples of port forwarding multiple devices on the same LAN using alternate port numbers.

Port Forwarding for ALIBI™ IP Cameras and Recorders

TT ALI Port Forwarding 160205

Page 2: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

2 www.observint.com © 2016 Observint Technologies. All rights reserved.

Discovery Tool

c. When Discovery Tool opens, it will automatically discover all Alibi devices directly accessible to the computer. The screen capture shown below lists the IP addresses of two Alibi cameras and an NVR. Also shown is the Server Port (Port) of the device, and the IPV4 Gateway used by the device.

Setting a “fixed” IP address in a Alibi IP device

The devices on your LAN that for which you configure your router for port forwarding should be configured with “fixes” (static, unchanging) IP addresses. By default, Alibi devices are factory set with an IP address of 192.0.0.64, and have DHCP enabled.

DHCP is a feature in most routers that provides network settings (including the IPv4 Address, IPv4 Subnet Mask and IPv4 Default Gateway) to devices that are compatible with the LAN so address conflicts probably will not occur. However, when DHCP in the device is constantly enabled (ie, dynamic IP address [default state]) the network settings of the device could change if the device was powered off and back on, rendering the port forwarding you setup in the router ineffective. A good strategy for configuring your Alibi IP device with compatible network settings is to use Enable DHCP in the device to acquire compatible network settings from the router, and then to disable DHCP in the device to save those settings and to not acquire new ones.

To check the network settings in an Alibi recorder, to the following:

2. At the recorder, open the administrator Configuration - Network - General screen. Go to: Menu | Configuration | Network | General. Refer to the recorder user manual for more information.

Enable DHCP checkbox

3. WIth the Enable DHCP box checked, the network settings may change (dynamic). To convert the dynamic IP settings to fixed (static) settings, uncheck the Enable DHCP box, and then click Apply.

NOTE: You can change the IPv4 Address by clicking on the field you want to change, and then using the virtual keyboard to enter a new value. Click Apply to save your settings. Be certain that the new address you configure is compatible with the LAN not used by any other device. Otherwise, IP address conflicts may occur.

Connect to an Alibi IP device on the LAN with a computer

4. To connect to an Alibi device using with a computer:

a. Open a Mozilla® Firefox® (or Microsoft® Internet Explorer®) internet browser tab on your computer.

b. In the URL field, enter the IP address of the Alibi device you want to connect to. In the example below, the URL entered was 192.168.1.113 (the IP address of the ALI-HVR listed in Discovery Tool above). If the Login screen appears, you have successfully connected to the device.

Page 3: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

3 www.observint.com © 2016 Observint Technologies. All rights reserved.

5. Determine the port numbers configured in the devices on the LAN for which you want to setup port forwarding:

a. For Alibi recorders, do the following:

i. On the Alibi recorder’s main display, go to: Menu | Configuration | Network | More settings.

ii. Record the ports in use settings for each network recorder. In the display above, note that: HTTP Port = 80 (used for connection to a computer internet browser) RTSP Port = 1050 (used for real time [live] video streaming) Server Port = 8000 (used for connection to a smartphone or tablet)

b. For Alibi IP cameras, you can log into the camera using the IP address as the URS, and then do the following:

i. - Click the Setup tab. - Click the Network link in the left frame. - Click the Port tab.

ii. Record the ports in use settings for each IP camera. In the display above, note that: HTTP Port = 80 (used for connection to a computer internet browser) RTSP Port = 554 (used for real time [live] video streaming) Server Port = 8000 (used for connection to a smartphone or tablet)

Step 2. Configuring the router for remote access to ALIBI devices (port forwarding)

Normally, devices within a private network (LAN) are invisible to devices on the Internet. However, when a computer is on different LAN than the one your Alibi devices are connected to, you can connect to those devices after configuring the router on you Alibi network for port forwarding.

In this example, a computer will connect to the Alibi device by using the IP address of the router interface to the internet (Uplink port) and the port in the router assigned to the device. To connect to Alibi devices with an Internet browser, the URL of the ALIBI device has the form: http://<IP address of router uplink port>:<inbound router port assigned to the device>

To access your Alibi devices remotely:

1. Determine the IP addresses of the ALIBI devices on your local network using ALIBI Tools. See “Step 1. Determine the IP address and port numbers configured in Alibi devices within a local LAN” on page 1.

2. Ensure that the Alibi IP devices on the LAN have “static” (fixed) IP addresses. If any devices have dynamic IP address (address assigned dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the device for more information.

3. Configure your router to assign ports (port forward) to the Alibi devices on the LAN. These steps are performed using a computer on the same LAN as your Alibi devices:

a. At the computer, open a Microsoft Command Prompt window. At the command prompt, enter ipconfig.

ipconfig entry

Default Gateway IP address: 192.168.1.1

b. In the report generated by ipconfig, find the Default Gateway IP address. See above. Record the address, and then close the Command Prompt window.

4. Go to portforward.com for specific port forwarding procedures to use with your router. See below. The procedure shown here is an example of how to use this website to configure your router for port forwarding. Use it as a guideline for configuring your router.

Page 4: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

4 www.observint.com © 2016 Observint Technologies. All rights reserved.

NOTEportforward.com includes procedures for most, but not all, router models. If your Alibi equipment is on a LAN within another LAN that can access the internet, find the guidelines on this website for multiple routers.

To find a procedure for your router for our router, a Linksys E1200, do the following. Use this technique to find a procedure for the router you are using.

a. In the portforward.com home page, click the link Port Forwarding Guides in the left frame under Routers.

b. Scroll down the screen to show a list of routers, and then click on the link for the first letter of the brand. This example, will choose a Linksys router.

5. In the list of Linksys routers, scroll down the list to find the E1200, then click on it to open the procedure screen.

In the screen shown below, click the link for Default Guide.

Click here

6. Use the procedure in the Default Guide to forward the HTTP Port, RTSP Port and Server Port in your router. An example of forwarding these ports in the E1200 router is shown in “Step 3. EXAMPLE: Forwarding ports in the Linksys E1200 router for an Alibi recorder” on page 5.

Page 5: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

5 www.observint.com © 2016 Observint Technologies. All rights reserved.

Step 3. EXAMPLE: Forwarding ports in the Linksys E1200 router for an Alibi recorder

In this example, please refer to the diagram on page 1. We will forward ports through the router for the recorder at IP address 192.168.1.113. Additionally, this Alibi recorder, uses three ports: HTTP Port = 80 (used for connection to a computer internet browser) RTSP Port = 1050 (used for real time [live] video streaming) Server Port = 8000 (used for connection to a smartphone or tablet)

Each of these ports will be forwarded to enable remote access from a computer on the internet and a smartphone with the Alibi Witness app.

1. Using a computer on the same LAN as your Alibi devices, use Internet Explorer, Mozilla Firefox, or Apple Safari to log into your router. The URL of your router is the Default Gateway IP address determined in “Step 2. Access your ALIBI devices remotely using a computer and browser” on page 2. In this example, the Default Gateway IP address is 192.168.1.1.

Enter the Linksys Username and Password. Router default Usernames and Passwords are also provided on the Portforward.com website. The initial Setup screen will open.

2. Click the Applications & Gaming tab, and then click the Single Port Forwarding submenu tab (see below). In this menu, do the following:

a. In the fifth row down, enter a descriptive name for the port you are forwarding.

b. In the External Port field, enter the number for (inbound) port to the router. In this example, the External Port number and the Internal Port number will be the same number. The entry configured here will be for the HTTP port of the device, port 80.

c. In the Protocol field, open the drop-down list and select Both if not already selected.

d. In the To IP Address field, enter the IP address of the device you are setting up remote access for. In this example, the IP address of the recorder is 192.168.1.113.

e. In the sixth row, use the example steps above to port forward the Server Port (8000).

f. Similarly, enter the fields in the eighth row for the RTSP Port (1050). See the example screen above).

g. Click the Save Settings button at the bottom of the screen. If the entries were accepted, an acknowledgement message appears.

3. To verify that the ports are open, from the computer on the LAN, open a browser tab and go to yougetsignal.com. Notice that the external address is 72.177.29.93. This represents the IP address of your router as seen from the Internet.

Page 6: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

6 www.observint.com © 2016 Observint Technologies. All rights reserved.

4. Use this online utility to verify that the three ports forwarded are open in the router. Do the following:

a. Verify that the HTTP port is opened in the router by entering the External Port number, 80, in the Port Number field, and then clicking Check. A message will appear beneath indicating the status of the port.

b. Repeat the previous step for ports 8000 and 1050.

To access the recorder using a computer on the internet, form the URL as follows, and then enter it into the URL of a browser: <Router External IP address> : <External Port forwarded to the recorder HTTP Port IP address> In this example, the URL will be: 72.177.29.93:80 Since port 80 is implied in the URL, the address becomes 72.177.29.93

If you see a Login screen when you go to the URL, the URL is correct and the HTTP port forwarding is setup correctly.

5. Log into the recorder and verify that you can see Live View video. If you see Live View video, the RTSP port forwarding configuration is setup correctly.

6. Install the Alibi Witness application on your smartphone. Alibi Witness is available for iPhone, iPad, Android, and Android tablets.

a. Open the Alibi Witness application. Tap the ALIBI Witness icon to open the app.

— If an ALIBI password was setup, a login screen will open. Tap the password field, enter your password using the pop-up keyboard, and then tap Confirm. After the ALIBI splash screen opens, a Live View window will appear.

— If an ALIBI password was NOT setup, the ALIBI splash screen will open, and then the Live View window will appear of a device was previously configured. Otherwise, the Main Menu will appear.

Main Menu

b. Open the Main Menu (shown above), tap the Device link to open the Device screen, and then tap the “Add” ( + ) icon in the upper right corner.

Page 7: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

7 www.observint.com © 2016 Observint Technologies. All rights reserved.

Tap to add a new device Tap field to edit setup

c. In the pop-up menu, select Manual.

d. Tap each field in the New Device menu and then enter the appropriate information to identify the device.

— Alias: The preferred name of the device. — Register Mode: Select either IP/Domain — Address: Enter the Uplink Port IP Address. In this example, it is 72.177.29.93. — Port: Enter the Inbound Port number forwarded to the recorder Server Port. In this example for the recorder, it is 8000. — User name: The user name of the device. — Password: The password of the device. — Camera number: The number of the camera(s) under the device can be automatically obtained after the device is

added. NOTE: to access the Camera number field, you may need to drag the menu up.

e. Tap the Save icon in the upper right corner of the screen to save the setup.

i. Tap the Start Live View bar to watch streaming video from your recorder.

Page 8: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

8 www.observint.com © 2016 Observint Technologies. All rights reserved.

APPENDIX A Example: Port Forwarding for Alibi equipment on an Arris DG1670A router This appendix provides an example of port forwarding an Arris DG1670A router, commonly used by Time Warner cable, for internet access by both a computer and a smartphone to three devices on the LAN behind the router firewall. This appendix includes three sub-appendices:

A.1 Port forwarding the ARRIS DG1670A router for an ALI-HVR3004H recorder

A.2 Port forwarding the ARRIS DG1670A router for an ALI-IPU3030R camera

A.3 Considerations for router port forwarding for additional cameras or recorders

Refer to the network diagram shown below when reviewing these procedures. The IP addresses shown in this graphic were determined using “Step 1. Determine the IP address and port numbers configured in Alibi devices within a local LAN” on page 1 and “Step 2. Configuring the router for remote access to ALIBI devices (port forwarding)” on page 3 above.

LAN (Private Network)

Router

Recorder

Computer

IP Cam A

IP Cam B

Internet(Public Network)

Alibi Witness smartphone app

IP addr: 192.168.0.201

IP addr: 192.168.0.202

IP addr: 192.168.0.210

Uplink port IP addr:

66.68.121.21

Default Gateway IP addr: 192.168.0.1

The Port Forwarding setup of this DG1670A router is not included in PortForward.com, however the basic steps for configuring the router are very similar. If you use this router, or to see an example of setting up multiple devices on a single router, review the procedures included below.

About Ports

While the term port is also used for hardware devices, in software it is always associated with an IP address. A port is identified for each address and protocol by a 16-bit number, commonly known as the port number. Port numbers can range from 0 .. 65535.

If a need is found to change a port number in a device, or select a port number to open in the firewall, avoid ports used for system services (0 - 1023, except 443 (HTTPS), 554 (RTSP) and 555) and private ports (49152 - 65535).

A.1 Port forwarding the ARRIS DG1670A router for an ALI-HVR3004H recorder

1. Determine the communication ports used by your recorder. On the Alibi recorder display, go to: Menu | Configuration | Network | More settings.

The settings shown in the screen above are the default port settings for most Alibi IP recorders. Port forwarding herein include: HTTP Port = 80 RTSP Port = 1050 Server Port = 8000

2. Determine the Default Gateway IP address of your router. Refer to “Method 2. Accessing your ALIBI devices remotely using a computer and browser” on page 2 steps 1 thru 4 above. The Default Gateway address for this example is 192.168.0.1.

3. Using the computer shown in the example diagram above (Computer), log into your router using Mozilla Firefox or Microsoft Internet Explorer. Enter the router password in the Password field, and then click Apply. The default password for the DG1670A router is password.

NOTEIf using Internet Explorer (IE), right click on the link to open the application, and then select “Run as administrator” in the pop-up menu before opening the IE.

4. Click on the Firewall tab, and then click the Virtual Servers link in the left frame.

Page 9: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

9 www.observint.com © 2016 Observint Technologies. All rights reserved.

5. Click the Add button to open an Add Virtual Server menu. In the Add... popup window, forward an inbound router of the router to the recorder HTTP port (port 80) as follows:

a. In the Description field, enter a character string to represent the port you are forwarding.

b. In the Inbound Port field, enter the port number you will use to log into the recorder through the Internet with a computer. Enter the number in both the “from” and “to” fields (see above). The port number you choose must be unused (not already forwarded and not blocked by the router). If it is already in use or blocked by the router, a message will appear when you try to save the port forwarding setup. In this example, port 14210 was selected.

c. In the Format field, open the drop-down list and then select Both.

d. In the Private IP Address field, enter the IP address of the recorder on the LAN.

e. In the Local Port field, enter the HTTP port of your recorder (port 80) in both the “from” and “to” fields.

f. Click Add Virtual Server, and then wait for the Add .. window to close. An entry for the port you forwarded will appear in the Virtual Servers list.

6. To access your recorder using the smartphone application Alibi Witness, you must port forward the Server port (default = 8000). Do the following.

a. Install Alibi Witness on your smartphone. Versions of this app are available for iPhone, iPad and Android devices. For Android devices, refer to the document ALIBI™ Witness and ALIBI™ Witness HD Apps for Android - Quick Start Guide available through your Alibi distributor. The procedure for Apple® devices is similar.

b. Add a Virtual Server to forward an Inbound Port of your router to the recorder Server Port (8000).

i. In the Virtual Servers Configuration window, click the Add button to open an Add Virtual Server menu.

ii. In the Description field, enter a character string to represent the port you are forwarding.

iii. In the Inbound Port field, enter the port number you will use to access the recorder using a smartphone. Enter the number in both the “from” and “to” fields (see above). The port number you choose must be unused (not already forwarded and not blocked by the router). In this example, port 14211 was selected.

iv. In the Format field, open the drop-down list and then select Both.

v. In the Private IP Address field, enter the IP address of the recorder on the LAN.

vi. In the Local Port field, enter the Server Port of your recorder (port 8000) in both the “from” and “to” fields.

vii. Click Add Virtual Server, and then wait for the Add .. window to close. An entry for the port you forwarded will appear in the Virtual Servers list.

7. Add a Virtual Server to forward an Inbound Port of your router to the recorder RTSP Port (default = 1050). For the RTSP port forwarding, the Inbound Port to the router and the recorder RTSP port must be the same number.

a. In the Virtual Servers Configuration window, click the Add button to open an Add Virtual Server menu.

b. In the Description field, enter a character string to represent the port you are forwarding.

c. In the Inbound Port field, enter the number of the RTSP Port configured in your recorder. Enter the number in both the “from” and “to” fields (see above). The port number must be unused (not already forwarded and not blocked by the router). If it is already in use, you must change the RTSP port in your recorder, and use that number for the Inbound Port and Local Port entries.

d. In the Format field, open the drop-down list and then select Both.

e. In the Local Port field, enter the RTSP Port of your recorder in both the “from” and “to” fields.

Page 10: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

10 www.observint.com © 2016 Observint Technologies. All rights reserved.

f. Click Add Virtual Server, and then wait for the Add .. window to close. An entry for the port you forwarded will appear in the Virtual Servers list.

8. Using the Computer on your LAN or a computer on the Internet, test the configuration to ensure you can access your recorder from the Internet:

a. Open a tab in your browser.

b. In the URL field, enter a URL in the format: <Router Uplink port IP address> : <Inbound Port number forwarded to the HTTP port> In this example, the URL will be: 66.68.121.21:14210 If a Login screen appears, the HTTP port is forwarded correctly and the URL format is correct.

c. Log into the recorder, and verify that you can view live video from your cameras. If camera video appears in the Live View tab, the RTSP port is forwarded correctly.

d. Test the port forwarding configuration using your smartphone.

i. Open the Alibi Witness application. Tap the ALIBI Witness icon to open the app.

— If an ALIBI password was setup, a login screen will open. Tap the password field, enter your password using the pop-up keyboard, and then tap Confirm. After the ALIBI splash screen opens, a Live View window will appear.

— If an ALIBI password was NOT setup, the ALIBI splash screen will open, and then the Live View window will appear of a device was previously configured. Otherwise, the Main Menu will appear.

Main Menu

ii. Open the Main Menu (shown above), and then tap the Device icon to open the Device screen, and then tap the “Add” ( + ) icon in the upper right corner.

Tap to add a new device Tap field to edit setup

iii. In the pop-up menu, select the method of adding. If you are adding a Alibi recorder, and the firmware includes a QR Code on the Configuration menu, scan the QR Code to pre-configure the device. Verify the settings in the configuration window as described below, and edit if necessary.

iv. Tap each field in the New Device menu and then enter the appropriate information to identify the device. — Alias: The preferred name of the device. — Register Mode: Select either IP/Domain — Address: Enter the Uplink Port IP Address. In this example, it is 66.68.121.21. — Port: Enter the Inbound Port number forwarded to the recorder Server Port. In this example for the H3004, it is

14211. — User name: The user name of the device.

Page 11: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

11 www.observint.com © 2016 Observint Technologies. All rights reserved.

— Password: The password of the device. — Camera number: The number of the camera(s) under the device can be automatically obtained after the device

is added. NOTE: to access the Camera number field, you may need to drag the menu up.

v. Tap the Save icon in the upper right corner of the screen to save the setup.

vi. Tap the Start Live View bar to watch streaming video from your recorder.

A.2 Port forwarding the ARRIS DG1670A router for a ALI-IPU3030R camera

Port forwarding an Alibi IP camera through the ARRIS DG1670A router is very similar to port forwarding an Alibi recorder. An important difference is that the default RTSP port assignment of Alibi IP cameras is 554 (1050 in Alibi recorders). The HTTP and Server default port numbers are the same.

1. Use the Computer to log into the ALI-IPU3030R camera locally using Mozilla Firefox. The URL is the local IP address: 192.168.0.201.

2. After logging in, click the Setup tab, click Network, and then click the Port tab.

The settings shown in the screen above are the default port settings for most Alibi IP cameras. Port forwarding herein uses: HTTP Port = 80 RTSP Port = 554 Server Port = 8000

3. Determine the Default Gateway IP address of your router. Refer to “Method 2. Accessing your ALIBI devices remotely using a computer and browser” on page 2 steps 1 thru 4 above. The Default Gateway address for this example is 192.168.0.1.

4. Using the computer shown in the example diagram above (Computer), log into your router using Mozilla Firefox or Microsoft Internet Explorer. Enter the router password in the Password field, and then click Apply. The default password for the DG1670A router is password.

NOTEIf using Internet Explorer (IE), right click on the link to open the application, and then select “Run as administrator” in the pop-up menu before opening the IE.

5. Click on the Firewall tab, and then click the Virtual Servers link in the left frame. Ports that you forwarded previously will appear in the Virtual Servers list.

6. Click the Add button to open an Add Virtual Server menu.

a. In the Add... popup window, forward an inbound router of the router to the camera HTTP port (port 80) as follows:

Page 12: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

12 www.observint.com © 2016 Observint Technologies. All rights reserved.

i. In the Description field, enter a character string to represent the port you are forwarding.

ii. In the Inbound Port field, enter the port number you will use to log into the camera through the Internet with a computer. Enter the number in both the “from” and “to” fields (see above). The port number you choose must be unused (not already forwarded and not blocked by the router). If it is already in use or blocked by the router, a message will appear when you try to save the port forwarding setup. In this example, port 14201 was selected.

iii. In the Format field, open the drop-down list and then select Both.

iv. In the Private IP Address field, enter the IP address of the camera on the LAN. In this example, the IP address of the camera is: 192.168.0.201.

v. In the Local Port field, enter the HTTP port of your camera (port 80) in both the “from” and “to” fields.

vi. Click Add Virtual Server, and then wait for the Add .. window to close. An entry for the port you forwarded will appear in the Virtual Servers list.

b. Add a Virtual Server to forward an Inbound Port of your router to the camera RTSP Port (default = 554). For RTSP port forwarding, the Inbound Port to the router and the camera RTSP port must be the same number.

i. In the Virtual Servers Configuration window, click the Add button to open an Add Virtual Server menu.

ii. In the Description field, enter a character string to represent the port you are forwarding.

iii. In the Inbound Port field, enter the number of the RTSP Port configured in your camera. Enter the number in both the “from” and “to” fields (see above). The port number must be unused (not already forwarded and not blocked by the router). If it is already in use, you must change the RTSP port in your camera, and use that for the Inbound Port and Local Port entries.

iv. In the Format field, open the drop-down list and then select Both.

v. In the Local Port field, enter the RTSP Port of your camera in both the “from” and “to” fields.

vi. Click Add Virtual Server, and then wait for the Add .. window to close. An entry for the port you forwarded will appear in the Virtual Servers list.

7. Using the Computer on your LAN or a computer on the Internet, test the configuration to ensure you can access your camera from from a computer on the Internet:

a. Open a tab on your browser.

b. In the URL field, enter a URL in the format: <Router Uplink port IP address> : <Inbound Port number forwarded to the HTTP port> In this example, the URL will be: 66.68.121.21:14201 If a Login screen appears, you have successfully port forwarded your router to access the HTTP port on your recorder.

Page 13: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

13 www.observint.com © 2016 Observint Technologies. All rights reserved.

c. Log into the recorder, and verify that you can view live video from your camera. If you see live video, the RTSP port forwarding is configured correctly.

8. Test the port forwarding configuration using your smartphone.

a. Open the Alibi Witness application. Tap the ALIBI Witness icon to open the app.

— If an ALIBI password was setup, a login screen will open. Tap the password field, enter your password using the pop-up keyboard, and then tap Confirm. After the ALIBI splash screen opens, a Live View window will appear.

— If an ALIBI password was NOT setup, the ALIBI splash screen will open, and then the Live View window will appear of a device was previously configured. Otherwise, the Main Menu will appear.

Main Menu

b. Open the Main Menu (shown above), and then tap the Device icon to open the Device screen, and then tap the “Add” ( + ) icon in the upper right corner.

Tap to add a new device Tap field to edit setup

c. In the pop-up window, select Manual (for adding an Alibi IP camera).

d. Tap each field in the New Device menu and then enter the appropriate information to identify the device.

— Alias: The preferred name of the device. — Register Mode: Select either IP/Domain — Address: Enter the Uplink Port IP Address. In this example, it is 66.68.121.21. — Port: Enter the Inbound Port number forwarded to the camera Server Port. In this example, it is 14202.

— User name: The user name of the device. — Password: The password of the device. — Camera number: The number of the camera(s) under the device can be automatically obtained after the device is

added.

e. Tap the Save icon in the upper right corner of the screen.

f. Tab the Start Live View bar to watch streaming video from your recorder.

A.3 Considerations for router port forwarding for additional cameras or recorders

When configuring ports to forward for an additional Alibi recorder or Alibi camera on your LAN, the RTSP port must be changed in the device if the default RTSP port number was already opened in the firewall for an other camera or recorder. For instance, if inbound port 554 was used for a camera (see “A.2 Port forwarding the ARRIS DG1670A router for a ALI-IPU3030R camera” on page 9), it cannot be used as an inbound port for a different IP address (device) on the LAN. Refer to sub-appendices A1 and A2 above for more information.

To change the RTSP port in the camera, do the following:

1. Use the Computer to log into the ALI-IPU3013R camera locally using Mozilla Firefox. The URL is the local IP address: 192.168.0.202.

2. After logging in, click the Setup tab, click Network, and then click the Port tab.

3. Change the RTSP port to a port number not previously assigned as an inbound port to the router, and then click Save. In the example above, the port was changed from 554 to 555.

RTSP port changed

Page 14: Port Forwarding for ALIBI IP Devices · dynamically by the router) change these address to fixed addresses by disabling the DHCP option. Refer to the documentation provided for the

14 www.observint.com © 2016 Observint Technologies. All rights reserved.

To configure the DG1670A router:

4. Create Virtual Servers to forward the HTTP Port shown in the camera Ports screen. In the Add .. window shown below, the inbound port selected was 15202.

5. Using the computer on the LAN, verify that you can connect to the ALI-IPU3013R camera and see a Login screen. With the LAN configuration shown in this example, use the URL 66.68.121.21:15202.

6. Create Virtual Servers to forward the Server Port and RTSP Port to the ports shown in the camera Ports screen. In the Add .. window shown below, the inbound ports selected for the Server Port is 15203. The RTSP port must be 555 to be consistent with the camera configuration.

The Virtual Servers list may then appear as follows.

Verify that you can connect to the ALI-IPU3013R camera with Alibi Witness. For the configuration used in this example,the device setup screen is shown below.