IP Camera Remote Access Basics
To successfully access an IP camera on a local network from the Internet, the following basics need to be taken care of:
- Install the camera(s) and verify that you can access them from the local network. Do not proceed unless you are successful with this step.
- Verify that your router has been assigned either a static or dynamic Public IP address from your ISP. Your router MUST be reachable from the Internet. Some ISPs provide you an IP address from their Private address pool. These will NOT work for remote access. You will know that your router has been assigned a private IP address if the WAN-side IP starts with 10, 172, or 192. Note: We are only talking about IPv4 addressing here. IPv6 addressing would be a totally different topic and means of access for IP cameras that support them.
- Use CheckIP to determine your router's current WAN-side (public) IP address.
- Dynamic addresses are typical for consumer-grade Internet service. If you have this type of address you will also need to use a Dynamic DNS service to have a "stable" means to reach your router easily via a "static" hostname.
- Verify which of the following sets of networking devices your network uses to access the Internet:
- A simple modem with a dedicated wired or wireless router attached directly to it via Ethernet.
- A simple modem with a dedicated wired or wireless router attached directly to it via Ethernet AND a second downstream router attached to the first by Ethernet or by wireless. In this configuration, one or the other router must be in bridge mode. The router that is not, will require port mapping. (see step 4)
- A combination modem/router or gateway device.
- A gateway device with a second, downstream wired or wireless router. In this case, one or the other device must be in bridge mode. The device that is NOT in bridge mode is the one that would require port mapping (see step 4).
- Configure port mapping/forwarding on your router.
- This may not be necessary if your cameras and your router support UPnP.
- If they don't you will have to manually create mappings to allow the needed services to communicate through the router.
- Typically, IP cameras require at least two communication ports:
- An HTTP port for administrating the camera. This typically would be TCP port 80.
- A camera video feed port. This typically would be a UDP port.
- You should check with your camera's documentation for the exact ports to use.
- If your camera is attached to a computer, and the computer utilizes a software firewall, these same ports will need to be opened.
- For Apple AirPort Extreme, Express, or Time Capsule base stations, use this link for additional information on port mapping: AirPort - Port Mapping Basics using AirPort Utility v6.x
- Test that you can access your network from a remote location.
- Ping your router's public IP address or your router's hostname if using a Dynamic DNS service.
- In addition, use the DynDNS CheckIP Tool or PortCheck Tool.com to verify that the mapped ports are open. Success is an "Open" response from the tool. Note: These type of tools are not 100% accurate, so you may not get the expected results.