Setting up DDNS for video surveillance. Create your permanent IP address Create your no ip account

When you connect to your ISP, the ISP gives you an IP address. Depending on the connection scheme, this IP address can be issued to a modem, router, or directly to the computer.

The IP address issued by the Internet provider can be either static, which does not change when reconnecting, or dynamic - when a different IP is issued each time you reconnect.

Why do you need dynamic DNS?

Dynamic DNS is used to bind a specific domain name to a static IP address and update the binding in real time. Thanks to the dynamic DNS service, you can access your equipment according to the selected domain name, For example, dmitriy-comp1233.no-ip.biz . At the same time, you do not need to find out what IP address the remote device has in at the moment. By the way, the device can be a computer, smartphone, router, modem and other equipment. Most often, dynamic DNS is used on a router.

If you have a D-Link device, you can take advantage of the free dynamic DNS service by registering at http://dlinkddns.com. Also, there is such a service as no-ip.

Linking a dynamic IP address to a domain name using the No-IP service

Registration in the service

Go to the website no-ip.biz and click on the button Sign Up Now:

Specify login(1), email(2), password(3,4), host name (5) and select domain zone(6):

after that click Free Sign Up:

Check the mailbox specified during registration. Follow the link in the email to activate your account in the No-IP service:

Fill in your information:

1. Surname
2. Security question
3. Answer to security question

and press Update Information(5):

Check that the hostname you added appears in the list.

Setting up the No-IP service on the router

This option is suitable for you if you have your own router.

Everything is simple here.

1 Find the Dynamic DNS tab.

2 In the list of dynamic DNS providers, select the No-IP service.

3 Enter the login that you specified when registering on the No-IP website.

4 Enter your password.

5 Enter the hostname (domain name) that you registered on the No-IP website.

6 Check the box Enable DDNS.

7 Click Login.

8 Click Save or Save to apply the settings on the router:

Setting up the No-IP service on your computer

This option is suitable if your computer is connected to the provider directly, i.e. you don't have your own router.

Click Download Now:

Run the downloaded file:

In the security alert window, click Launch:

Click I agree:

And Install:

After installation is complete, click Finish:

Enter your login (1), password (2) and click Sign In(3) for authorization in the client program.

A window like this should appear.

Your IP is now mapped to the selected hostname and corresponding domain name.

The development of the Internet has not bypassed video surveillance systems, and now remote control of objects is available from anywhere in the world. IP cameras connect directly to the network, video archives are recorded in cloud storage, and tariffs are available for all categories of users, for example, from Ivideon.

1. Video broadcasts from cameras pass through third-party servers, and the archive is stored there. Despite all the assurances of maintaining confidentiality and encrypting data, it is impossible to completely eliminate the risk of unauthorized access, and for sensitive objects such an organization of surveillance is unacceptable. From a security point of view, it is better to connect to the equipment directly, through a secure VPN connection, without unnecessary intermediaries.
2. Each camera or video recorder must be provided own connection to the Internet, which can be expensive technically and financially, especially if most of the time surveillance is carried out inside local network object and remote access via the Internet is not a frequently requested function. It’s easier to connect all devices via one Internet connection using a router and set up remote access using DDNS technology.

As an example, we useTP-Link TL-WR740N. This router, with a good price/quality ratio, is widely used among home users and small businesses, and is often offered by Internet service providers with their own firmware. We use an English-language interface to avoid confusion. DDNS settings and partition names are the same on equipment from any manufacturer, but the Russian translation is sometimes different.

DDNS or DynDNS technology will connect via the Internet to video cameras and DVRs located on the local network using a router and dynamic IP addresses.

This formulation is incomprehensible to most users, so we will analyze the network connection process in detail.

Each router contains an internal list of IP addresses that are automatic mode assigned to each connected network device(computer, smartphone, IP video camera, video recorder, etc.). With each new connection, the address is selected randomly - this is dynamic IP addresses :

In addition to dynamic ones, constant or static IP addresses, both for the router and for connected devices:

Internet providers also work according to the same scheme for distributing IP addresses. When a connection is established, the computer or router is connected to the provider’s global network and, through DHCP, the server receives a new dynamic IP address:

A static IP address is provided by providers for a fee, and it happens that it is impossible to obtain an address:

1. Small providers work through larger ones and clients have access to a small range of their own static addresses;
2. Mobile Internet for almost all providers works only through dynamic IP addresses.

DDNS services control changes in the router's dynamic address for permanent access to local network devices through a special static level 3 domain:

In more detail, the access scheme via DDNS is as follows:

1. A local network device, such as an IP camera, receives a dynamic address from the router;
2. We configure port forwarding on the router and gain access to the equipment according to the scheme “router address + port”;
3. The provider assigns an external dynamic IP address to the connection;
4. The DDNS service replaces the router’s IP with the address of our static 3rd level domain;
5. Now we have access via the Internet using a domain name or “domain + router IP”;
6. We watch video from the camera through the browser.

Port forwarding

Forwarding, or port redirection (Port Forwarding) is a prerequisite for access via the Internet to network devices connected through a router.

If port forwarding is not configured, a situation arises when by contacting the router address directly or through the DDNS service, only access to the admin section is available and nothing more.

Go to the local address of the camera, recorder or local server also does not give anything - only folders or blank page. Only assigning individual ports and setting up redirection in the router makes it possible to “reach out” to the camera you need or computer.

DDNS setup

Routers establish a connection to the Internet provider’s network using NAT technology, which uses two types of addresses:

• external (WAN) assigned by the provider when establishing a connection;
• internal (LAN), which the router gives to network devices;

For normal operation of WAN port forwarding, the address should not fall into the IP address zones starting with 10.0, 192.168. and 172.16.

If the external address is within the specified ranges, you will have to purchase a static “white” IP address or change the provider.

Local Address Reservation

Since each time you connect, network devices are assigned a new dynamic IP, to access via DDNS you need to convert the current IP address to a “local static” one, otherwise we will not be able to get permanent access, because The router changes address when reconnecting or rebooting:

A unique MAC address must be specified in the documentation and network settings. We repeat this procedure for all devices that we plan to access via the Internet.

Setting up port forwarding

Go to the menu "Forwarding" => "Virtual Servers" and add a new port (“Add New...”):

• Service Port – enter the device port for redirection;
• IP Address – local IP that we have reserved for this MAC address;
• Status And Common Service Port – leave unchanged.

Security Settings

Disable the router's firewall:

Port forwarding has been configured.

Automatic redirection

You can simplify the forwarding process by using the UPnP function. By default, it is activated in most routers and looks like this:

Here we see that the Skype and uTorrent ports are automatically forwarded. If your video equipment supports UPnP mode, then most of the ports will be forwarded without your participation.

Solving possible problems

1. All settings are made correctly, but when accessing a network device, the router’s admin page continues to load. Try changing the value of http and media ports, forwarding and testing the connection from an external rather than local network.
2. If when contacting local device nothing happens, check the following:

• Antivirus tools and firewalls must be disabled or exceptions added to all forwarded ports;
• The required ports can be opened by the provider only for static IP addresses;
• Check that the NAT connection function with your provider is enabled;
• At manual setting network parameters make sure that the gateway address of the device to which port forwarding is performed matches the IP address of the router;

1. Connect an external open DMZ server. Now all external Internet requests are automatically redirected to the specified IP within the local network.
2. Opening the required port on the device and router may not give the desired effect, even with a static IP, if it is closed by the provider. In such cases, you need to contact technical support with a request to open the required port.

Let's proceed to the next step and register on the free service no-ip.com. On home page click “Sign UP”:

Enter your email, login and password. The name of the static domain (host) through which access will be provided can be specified during registration or selected later (“Create my hostname later” in the registration form). Choose free tariff plan to get acquainted with the service. To confirm registration, follow the link sent by email.

Login to the created account and select « AddHost", enter the host name and select the domain zone from the section « Free DNS domain". We leave the remaining parameters unchanged.

Turn on the item "Port 80 Redirect" and specify the new port through which DDNS accesses the router.

The new management port is usually set to 8080. Settings in the admin area:

The No-IP account setup is complete, go back to the admin section of the router and select a service from the list of supported DDNS:

Entering data open account and domain name. Turn on « EnableDDNS", click “Login” and after establishing a connection with the server, save the parameters.

Now, by accessing the website indicating the camera port, we get access to the video broadcast:

IN network equipment There may be support for a proprietary service, for example, from D-Link and ASUS. Here's what the D-Link DDNS setup looks like:

The account only supports one host, which is enough for personal use and testing, but for larger systems use paid packages such as those from Dyn.com.

Setting up DDNS in IP cameras and DVRs

Cameras and DVRs support direct connection via a separate Internet connection without additional equipment. Setting up DDNS follows the same procedure as in routers: we create a DDNS domain and register its settings in the WEB interface of the device.

Example for IP camera RVi-IPC22DN:

and for Dahua HCVR4104C-W-S2 DVR:

As you can see, all parameters are standard and setup is not difficult. The only difference from a router is that via the DDNS domain it is possible to access only one device, since port separation is not used in this case.

A logical question arises: why such difficulties, if to establish a connection with the camera and access the video archive you just need to type the digital IP address in the browser?
Two arguments in favor of DDNS:

• Remembering a domain name is easier than remembering a sequence of numbers;
• Hacking passwords is simplified if the device's IP is known. Manufacturers assign addresses in their specially designated range, which is known to everyone and it will be easy for an attacker to understand that this IP relates specifically to video surveillance.

• Make sure that on all cameras and recorders the gateway address matches the router, only the IP addresses should differ. Don't rely on automatic setup, check all parameters manually.
• If the browser shows a blank page, make sure that the required plugins are from software cameras or recorders are installed and working correctly. Most equipment works in modern browsers by default, but there are models with non-standard video encodings.
• When purchasing a static IP address from mobile providers, there may be a situation where a “static” IP address is only guaranteed legal entities, and individuals it changes “slightly” periodically. This does not affect browsing the Internet in any way, but connecting to a router or IP camera is no longer possible without using DDNS.
• Ports defined by UPnP are blocked at the provider level. In this case, try changing and forwarding the ports manually - devices usually reserve several ports through which they operate.
• Check access and port forwarding only from a computer not connected to the local network. That's the only way they're visible possible problems settings and connections.
• Use HTTPS or a VPN connection to encrypt your video and protect it from hackers.

With a static or dynamic IP address, you can access home server from anywhere in the world (if you have access to the Internet).

Why is this even necessary? It all depends on your needs. Perhaps you want to run your own website on your home machine or organize a game server?

Let's imagine for certainty that the task is to organize video surveillance in an office (or country house) and make it accessible from global network. The office receives a gray dynamic address from the provider (today it is 178.7.152.210), then there is a router that distributes the Internet over the office network. The video server will be a machine with the address 192.168.0.3 (Fig. 1)

Home network diagram

I would like to note right away that, as a rule, a limited circle of people should have access to the http video surveillance server, so do not forget to password protect it after setup.

The first thing you need to do is change the port through which you will connect to your server. We set a non-standard value, for example 8090, and remember it.

Second. Since we have decided that the video server is a device with the address 192.168.0.3, ensure that this same address remains unchanged. This can be done in several ways, we will not dwell on this here.

Now you need to understand an important thing. An external network subscriber (for example, 178.7.150.200) cannot see your server with the address 192.168.0.3. Not at all. It only has access to the external address of your network, namely 178.7.152.210. No matter how many computers there are on your network (behind the router), for outside world they will have the address 178.7.152.210 This needs to be understood once and for all. What's the solution?

The solution is quite simple. Since only the address 178.7.152.210 is accessible to the outside world, this means that it is necessary to contact it. In order for the router to redirect the request specifically to our server, it needs to “explain” that the request on port 8090 is intended for a machine with the address 192.168.0.3. Thus, a request to our http server from the outside it will look like http:// 178.7.152.210:8090 Having received the request, the router will redirect it to our machine 192.168.0.3:8090 and we will receive what we need.

Now let's do this in practice. For example, I use the very popular TP Link VR741N router. In other router models, everything will be very similar. So, let's set up port forwarding. To do this, go to the web interface of the router, look for the “Forwarding” - “Virtual Servers” tab and click the “Add New” button (Fig. 2)

Setting up a TP Link router

We fill in the lines according to our tasks (port, server address) (Fig. 3)

You can select “All” protocols for now, or select the one you need if you know exactly which one. That's it! (Fig. 4)

Right now you can try to connect to your server from anywhere on the Internet by typing your address and port as in the example above (http:// 178.7.152.210:8090)

Owners of white (statistical) addresses can stop here and use access. But a dynamic address can change at any time. What to do? You can, of course, write a script that will periodically check the external address and notify you of changes by email or phone. But the focus of our article is different. We will give our server a name, and a special service will “link” this name and the IP address of our router, no matter how it changes.

I will use the No-iP service. If you want to follow my instructions, go back to the router’s web interface and find the “Dynamic DNS” tab. Check the drop-down list to see if the firmware supports the No-iP service. If there is, as in Fig. 5

Now, as you understand, you need to register for the service at http://www.noip.com/ Go to the site and click “Sign Up” in the upper right corner of the page. Fill in the fields, check the “create a name later” checkbox (as in Fig. 6)

and click the “Free Sign Up” button. They say they don't like the service mailboxes@mail.ru, so I used another one to register.

Configuring a No-IP Host

If everything was done correctly, we get to personal account(Fig. 7)

Now carefully fill in the fields (Fig. 9)

1. Since we are accessing an http server, which by default has port 80, we set the “redirect port 80” switch
2. Open the drop-down list and BELOW the line NO-iP Free Domains select any domain.
3. We can come up with any name for our site. It must be unique.
4. In this line, the service tries to automatically indicate your external address. Usually everything happens correctly, but you can double-check using other services.
5. We indicate the port that we need. 8090 in this case.
6. Click the “ADD Host” button at the very bottom. If everything is done without errors, we get the following picture (Fig. 10)

Linking the router to No-IP

The task is almost completed! All that remains is to “link” our router to the created account! To do this, go to the router’s web interface again to the “Dynamic DNS” tab and fill in the fields using your account data (Fig. 11)

1. We have already chosen NO-iP.com as a service provider. If not, choose. As the username, indicate the email that you used to register.
2. Enter the password you used during registration.
3. We indicate the domain name that we came up with such difficulty
4. Check the “enable” box
5. Click the “Login” button

That's it! Now everyone who dials address bar browser address:

http://videoservertest.ddns.net

will get to the NO-iP service, the service will instantly redirect the request to my router (port 8090), and the router to the web interface of my video surveillance system.

Let me remind you that not every server owner wants access from outsiders! Don't forget to take action!

1. The ddns service will help you when you do not have an external permanent IP. Using this service you can connect your computer + ddns + Another service, it can be a video camera or video recorder. You can connect your server without an external IP, with your computer, or connect a domain and make an http server. The domain can be obtained in your account settings, no-ip. This video shows how to set up a domain and how to configure the program on the computer itself. If you do everything as in the video, the connection with your computer will be through this domain. You can register the settings in the router without installing the program on your PC, just enter the domain + login + password from no-ip. Actually, just as you configured and specified the authorization data, the same data will be required to configure the device with which you need to communicate without a permanent IP.

Description of registration on the NO-IP service

2. 1. Having entered the noip website, click one of the green “Sign Up” buttons, which allows you to proceed to the registration procedure.
3. 2. Fill in the “Username”, “E-mail” and “Password” fields. Please note that when you enter a password on the right, its strength is automatically assessed. For the security of your account, achieve the maximum security level “Strongest”.
4. 3. Check the “Create my hostname later” checkbox. If you do not want the newsletter to be sent to your e-mail, then uncheck the “Send me newsletters & special offers” checkbox. Here you can compare the capabilities of paid and free accounts (“Enhanced” and “Free”), and choose any of them as desired. In our example, a free account, select the “Sign Up” button.
5. 4. After completing registration, click “Sign In” in the upper right corner. On the page that opens, fill in the fields with your registration data and click on the “Sign In” button.
6. 5. Once in your personal account, use the “Add a Host” button to add a new host name for computer device with whom you want to keep in touch, if you did not add it during registration as in the video.
7. 6. In the “Add Host” dialog that opens, select the “Host Type” – “Port 80 Redirect”. Next, fill in the “Hostname” field with an arbitrary combination letters A-Z and numbers 0-9, and select any domain name from the “No-IP Free Domains” drop-down list. The “IP Address” field is automatically filled in with the address from which you accessed the site. In the “Port” field, enter an arbitrary value for the HTTP port other than 80. The same value for this port will need to be configured on the router (router), another device that you want to configure to connect to the service.
8. 7. At the bottom of the page, click the “Add Host” button to complete the process of creating a new host.
9. 8. You will be notified that the host has been created successfully, and the host will appear in the list of hosts sorted by domain. None additional settings You don't need to do this on the website. If the HTTP port has already been reassigned in your router settings, then you can check the connection by connecting to the IP address indicated in the middle column. The connection should work successfully.
10. Not like that in a cunning way you can find your router or computer on the Internet without having a permanent external IP. The video shows how to set up a computer or laptop by installing the program. Below I will show how to configure a router to connect to the no-ip service and constantly monitor it if the external IP address is changed. Example below using TP-LinK router AC-750, in fact, all routers are almost the same menu name, picture below:
11. 1. Select the menu item "Dynamic DDNS" Dynamic DDNS.
12. 2. Select the no-ip service from the drop-down list.
13. 3. Enter your login as indicated on the no-ip service.
14. 4. Enter the password that you also specified on the no-ip service.
15. 5. Specify the domain name you chose on the no-ip service.
16. 6. Click the save settings button.
17. 7. On some routers, including this model, you can check the connection to see if you have entered the data correctly.
18. Actually, everything is simple: if you watched the video and paid attention to the description, there should be no questions. This service will replace a paid external IP address, in its place your device does not matter that it can be found by domain name.

Video surveillance via the Internet is becoming more popular and accessible every day, but not everyone has the opportunity to use a dynamic IP address or resort to services. As alternative option Connecting CCTV cameras to the Internet and then viewing the image on any device with Internet access involves setting up DDNS, or assigning each IP camera or DVR a separate permanent domain name.

DDNS stands for dynamic system domain names, and can convert your dynamic IP address into a domain name, which you can then simply enter in the address bar of your browser from any device connected to the Internet and access the image from the camera.

Step 1: register on the NO-IP service

One of the services that provides the opportunity free creation The domain name for the IP address is Noip.com. We follow the link to the site, and in the first line you are immediately asked to enter the desired domain name. Enter any name that comes to mind and click on the green button.

You will now be redirected to the registration page. We enter the username and password, and also indicate the address email, which you must have access to, because you will receive a link to activate your account. After all the data has been entered, click on the “Create My Free Account” button.

After registration, you will have your own free domain(for example, nabludaykin.hopto.org), NO-IP will now offer you a small guide to the necessary steps:

• Step 1 - Create a hostname. (This step has already been completed);
• Step 2 – Download the Dynamic Update Client (DUC). DUC stores your hostname, and is updated with the current IP address. (You don't need to download this tool as IP cameras and DVRs have built-in DUC);
• Step 3 – Forward the router ports. We will dwell on this point in more detail.

Step 2: Router Port Forwarding

Now let's move on to the router settings. Port forwarding is the process of setting up a router to gain access to the DVR, cameras or any other network device from computers and other gadgets located outside the local network. Port forwarding allows you to assign an IP address and port number for routing network requests to specific devices.

You need to do port forwarding for the IP address of the NVR or . For example, the local IP address of the DVR is 192.168.0.188, then you need to go to the router port settings (usually located in the “virtual server” tab) and add port forwarding rules. Below are the interfaces of the 4 most popular manufacturers. Keep in mind that your router may display a different interface, but the logical structure in almost all devices is the path to settings virtual server intuitive.

Step 3: set up DDNS on the DVR

After entering the settings of your DVR, go to Settings > Network > DDNS Setting, check the “Enable DDNS” checkbox, then select “No-IP” in the “server type” line. For each equipment manufacturer, the names of the items may differ slightly, but the principle remains the same.

Fill in your information about account No-IP service:

• Server type: No-IP
• Server name: dynupdate.no-ip.com
• Port: 80
• Username: admin@site
• Password: ******
• Confirmation: ******
• Domain: nabludaykin.hopto.org

Then log into your DVR's web interface, go to Network Settings > DDNS Settings, check the "enable DDNS" box, and then select "No-IP" from the list provided. Fill out the form with your available domain name, and then enter your account login and password.

After completing the above steps, you can visit your NVR with a free domain from any device by going to the address you provided, in our case nabludaykin.hopto.org.

Step 4: connect cameras

For correct settings DDNS for CCTV you need to make sure that the IP cameras and DVR are connected to the same router and are also on the same LAN. To do this, you need to check the network settings of each device. We enter the IP address of each camera in the address bar of the browser, and we get to network interface devices. Here we need to tidy up the IP addresses of each camera and place them in the same subnet with the DVR.

If we configured the DVR as follows:

• IP address: 192.168.0.188;
• Subnet mask: 255.255.255.0;

Then the IP camera parameters should look something like this:

• IP address: 192.168.0.21;
• Subnet mask: 255.255.255.0;
• Default gateway: 192.168.0.1.

Other dynamic IP address services

ChangeIP.com. Another reliable DDNS service. Today, the service offers free assignment of a domain name to a dynamic IP address; you can get up to 7 free sub-domains.

DNSExit.com. This service offers free DNS hosting for your own domains. If you don't have your own domain, you can also use theirs free service DNS with domains like publicvm.com and linkpc.net, after registration you can get two free sub-domains.

DNSExit is a professional DNS service provider. The company offers a free dynamic DNS service to users all over the world, and you can register your domain for free, or use a free second-level domain (sub-domain). A free second-level domain allows you to create a host name and specify a dynamic or static IP address.

Afraid.org. Quite an old provider free receipt DDNS – the company provides free registration dynamic DNS since 2001. Until now, their website is still open for free DDNS registration.