Mikrotik RB750 and IP camera?

Question

Mikrotik

Hello. And so, there is a RB750 router and a Hikvision ip camera. The router has a white IP address, a camera is connected to it via UTP, it receives an address from the DHCP router. The point is that, through DDNS, I can’t access the camera, it redirects the router’s face to the web itself. And from the computer on the network everything is fine, it connects to the camera. Tell me what can be done? Will port forwarding help?

Answer 1

1. You need to understand what dynamic IP address your router gave the camera.
to do this, you need to give the command:
2. By line number (let's say -- 5) bind the address of your camera in the list of dhcp-leases:
3. You need to specify the address of your camera in port forwarding. You can do it like this:

/ip firewall nat add action=dst-nat chain=dstnat \
 comment="port forward for my ip-cam-1" dst-port=52855 \
 in-interface=ether1 protocol=tcp to-addresses=192.168.88.161 to-ports=80

-- I explain: this line configures the forwarding of external port 52855 on the external ether1 interface of the tcp protocol to the local host 192.168.88.161 (example) on the local port 80.
4. In the firewall, you need to make sure that your external port 52855 will be accessible from the outside. To do this, before the blocking rule, you need to register permission:

/ip firewall filter add chain=input \
 comment="allow port fwd to my ip-cam-1" dst-port=52855 protocol=tcp place-before=5

I hope no explanation is needed. :)
Z.Y. I strongly advise you to make sure that access to your router from the outside is open only to trusted hosts, or better, closed altogether. You should not give chances to someone to guess the password to your router.

Answer 2

Write a static IP to the camera. Forward WAN port 80 to camera port 80. And business then.

Answer 3

1. Static address for the camera. The IP must be from the internal subnet. In Mikrotik it is 192.168.88.X.
You can assign the camera, for example 192.168.88.10
2. On the router, make port forwarding
https://habrahabr.ru/post/182166/
https://www.youtube.com/watch?v=hhopnm6_D6A
It should work.

Answer 4

If the task is to steer the router from the webmord, then it is logical that the 80th port will be occupied by the admin panel of the router. In this case, you need to forward the 80th port of the camera to another port in the router, for example, to 8080. If you can steer the router through the winbox, then just chop off the web muzzle, and forward the port from 80 to 80, and that's it.

Answer 5

And yet, since such a booze, in the Mikrotik dhcp server, there is a magic "make static" function, so it's easier and more correct to set a permanent ip-address than to separately configure each device and reconfigure it later when changing the network configuration. Well, in addition to the muzzle, do not forget to forward the video stream, if necessary.

Answer 6

what am I doing wrong, then at least the router’s face was thrown on the web now - it’s impossible to display this page
at all.