IP Camera remote access via AIS Fibre & ZTE F660

[trevoromgh]

Just wondered if anyone has AIS Fibre and have successfully got IP cameras working so they can be accessed from the WAN rather than just the wi-fi (which I've managed to do already) ?

My link to the fibre network is via a ZTE GPON F660 modem/router and I've attempted to setup DDNS links to THDDNS and no-ip.com and have also tried to open ports 80 & 81 using the port forwarding commands provided but to no avail.

Any advice gratefully received?

Trevor

[maxpower]

 

[trevoromgh]

Thanks for the heads up on that topic Max, will have a read and see if I can fix it myself if possible.

[CaptHaddock]

Some of the ISPs, TOT, for instance, block port 80.  You could try configuring the cam for a high port.  You should be able to verify if the DDNS client is working correctly by checking against the results from whatismyipaddress.com or some similar website.   Carrier Grade NAT may also be the issue in which case you have to ask the ISP.

[trevoromgh]

Thanks for the suggestion but I did try a higher port already without success.  I used the admin commands to open the ports, created static IP addresses for the cameras, set-up DDNS links to THDDNS then No-ip.com, ran port checker but each one I attempted to open were being shown as blocked.  Called AIS and when a technician eventually called back he just told me to check for tutorial videos online (which I'd already done) and he also didn't seem to understand English very well or the technicalities of the ZTE ZXHN F660 router they had installed for me.   Will probably call again and hope for a more experienced person next time.

[CaptHaddock]

41 minutes ago, trevoromgh said:

Thanks for the suggestion but I did try a higher port already without success.  I used the admin commands to open the ports, created static IP addresses for the cameras, set-up DDNS links to THDDNS then No-ip.com, ran port checker but each one I attempted to open were being shown as blocked.  Called AIS and when a technician eventually called back he just told me to check for tutorial videos online (which I'd already done) and he also didn't seem to understand English very well or the technicalities of the ZTE ZXHN F660 router they had installed for me.   Will probably call again and hope for a more experienced person next time.

Not "higher" port, as in 81, but "high" port as in 52363, at least above 1024.

 

Did you verify that DDNS is working?  I.e. does a ping of the DDNS name give the same ip as checking whatismyipaddress.com from within the target network?

 

Verify that the web interface to the cam is working by connecting to it from another host on the same lan, i.e. so that you don't have to go through the router.  You should be able to see the video output.

 

Verify that the port forwarding is correctly configured on the router.  Install telnet on your computer.   You should be able to do "telnet <DDNS name> 52363" and get a text response.  If not then it is either the ISP or misconfiguration on the router.  When you configure the port forwarding it is possible that the interface lets you identify whether it is the adsl or vdsl PPPoE interface.  If you pick the wrong one, you will get nothing. 

 

In my experience you are unlikely to get a Thai techie from support who speaks English fluently. 

[carthaivisa]

I think the problem that AIS powerhome (standard) gives you  Private IPv4  not public IPV4 so it requires a lot of technical configurations.

[CaptHaddock]

1 hour ago, carthaivisa said:

I think the problem that AIS powerhome (standard) gives you  Private IPv4  not public IPV4 so it requires a lot of technical configurations.

I just explained how you can check that.  Have you checked it or are you guessing?

[trevoromgh]

Not "higher" port, as in 81, but "high" port as in 52363, at least above 1024.    I tried ports 10204 & 10201

 

Did you verify that DDNS is working?  I.e. does a ping of the DDNS name give the same ip as checking whatismyipaddress.com from within the target network?    Yes pinging the DDNS name does give the same IP address

 

Verify that the web interface to the cam is working by connecting to it from another host on the same lan, i.e. so that you don't have to go through the router.  You should be able to see the video output.  Yes I can connect via browser to internal IP address fine

 

Verify that the port forwarding is correctly configured on the router.  Install telnet on your computer.   You should be able to do "telnet <DDNS name> 52363" and get a text response. I am running an Open Port Checker tool (which I assume does a similar thing to telnet and whichever port I use the result is the same i.e. it is blocked and not open

 

If not then it is either the ISP or misconfiguration on the router.  When you configure the port forwarding it is possible that the interface lets you identify whether it is the adsl or vdsl PPPoE interface.  If you pick the wrong one, you will get nothing.   The only thing I see in the WAN Connection Field is the word  INTERNET which is not very useful for ID purposes ... looking at the manuals for other models in the ZTE range and they seem to infer that PPPoE is used as they had those letters in the ID name

 

In my experience you are unlikely to get a Thai techie from support who speaks English fluently. AIS are normally very good so might just need to keep trying

 

Thanks for all the advice this is proving to be a real stinker to sort out.  

[maxpower]

Slowly with all this port talk. Have you done this :-

 

[CaptHaddock]

1 hour ago, trevoromgh said:

Not "higher" port, as in 81, but "high" port as in 52363, at least above 1024.    I tried ports 10204 & 10201

 

Did you verify that DDNS is working?  I.e. does a ping of the DDNS name give the same ip as checking whatismyipaddress.com from within the target network?    Yes pinging the DDNS name does give the same IP address

 

Verify that the web interface to the cam is working by connecting to it from another host on the same lan, i.e. so that you don't have to go through the router.  You should be able to see the video output.  Yes I can connect via browser to internal IP address fine

 

Verify that the port forwarding is correctly configured on the router.  Install telnet on your computer.   You should be able to do "telnet <DDNS name> 52363" and get a text response. I am running an Open Port Checker tool (which I assume does a similar thing to telnet and whichever port I use the result is the same i.e. it is blocked and not open

 

If not then it is either the ISP or misconfiguration on the router.  When you configure the port forwarding it is possible that the interface lets you identify whether it is the adsl or vdsl PPPoE interface.  If you pick the wrong one, you will get nothing.   The only thing I see in the WAN Connection Field is the word  INTERNET which is not very useful for ID purposes ... looking at the manuals for other models in the ZTE range and they seem to infer that PPPoE is used as they had those letters in the ID name

 

In my experience you are unlikely to get a Thai techie from support who speaks English fluently. AIS are normally very good so might just need to keep trying

 

Thanks for all the advice this is proving to be a real stinker to sort out.  

I think your router is probably misconfigured.  But I misspoke earlier.  In order to exclude the possibility that the ISP has you behind a Carrier Grade Nat, you have to compare the DDNS ip you can see by pinging the DDNS hostname against the WAN side ip which you can see by logging into the router and checking WAN IP.  If those two are the same then there is no Carrier Grade NAT.

 

Another way to diagnose the router is to turn on temporarily internet-side login access to the router and then see if you can login to it remotely.  This is a good test since you won't have to configure port-forwarding.  If you can login, then the problem with your camera is definitely your port forwarding config.  Best not to leave remote-access on for security reasons.

[maxpower]

6 minutes ago, CaptHaddock said:

I think your router is probably misconfigured.  But I misspoke earlier.  In order to exclude the possibility that the ISP has you behind a Carrier Grade Nat, you have to compare the DDNS ip you can see by pinging the DDNS hostname against the WAN side ip which you can see by logging into the router and checking WAN IP.  If those two are the same then there is no Carrier Grade NAT.

 

Another way to diagnose the router is to turn on temporarily internet-side login access to the router and then see if you can login to it remotely.  This is a good test since you won't have to configure port-forwarding.  If you can login, then the problem with your camera is definitely your port forwarding config.  Best not to leave remote-access on for security reasons.

He is on a private network.... AIS has the solution and the penny will drop soon. 

[CaptHaddock]

4 minutes ago, maxpower said:

He is on a private network.... AIS has the solution and the penny will drop soon. 

It's possible, but why would AIS offer a DDNS service in that case since it wouldn't work?

[maxpower]

13 minutes ago, CaptHaddock said:

It's possible, but why would AIS offer a DDNS service in that case since it wouldn't work?

AIS have offered the DDNS service and selected ports for those who wish to forward to their private network address. Eg. Security camera. Its a controlled solution.

[trevoromgh]

Hmmm seems that I may have to approach AIS again for a solution.   Unfortunately I have to break off my investigations for a week as there has been an accident in the family and I need to go visit them tomorrow.  Thanks again for your help guys and I'll pick up the thread again when I return.  Cheers

[frazze]

18 hours ago, maxpower said:

Slowly with all this port talk. Have you done this :-

 

Thanks mate! I was also trying to get the remote viewing working and suspected it was NAT'ed IP. After signing up in this page and setting the port forwarding (with the newly asigned ports) in the router, everything works fine! I can now view the cameras in the mobile.

But be aware it took 3 registration attempts before the verification e-mail was recieved.

 

Cheers

 

 

[trevoromgh]

Hi guys back again.  Glad this thread was of assistance to you Frazze.  

 

CaptHaddock I did as you suggested and checked the IP address from the router and then from browser and some software I downloaded and as you suspected the results were different IP addresses were shown,  so I guess I'd need to approach AIS to get my cameras setup then?

 

The strange thing is that I have two specialist cameras called Amaryllo iCamPro FHD installed which have configured themselves to the router and I can view them remotely via their online server without problems so they must have worked out a way of doing it.  Could be something to do with P2P access which avoids need to do all this router port configuration and DDNS set-up I believe but I don't know how that works and what's involved in doing something similar.