Was talking with a client who was told by their satellite ISP that it was impossible to use IPv4 to view their Sony SNC-CX600W camera from outside the LAN. The client is using an Asus RTN53 which supports IPv6.... question is how and if it is possible to access the camera from outside the network?
It is also apparent that IPv6 does not need port forwarding.... is this because the device is directly on the internet with no "routing" aside from it's allocation of an IPv6 address from the DHCP server?
Many, many more than will ever be needed. For that reason, if your ISP is using IPv6, they will generally assign you as many addresses as you need (hundreds easily) and each of your devices can use a unique (public) address. Then, no router is required, and you can just use switches.
Because the IPv4 structure 'shares' one public IP address, the LAN router can (and does) act as a firewall - since all traffic has to pass through it to reach the local IP-addressed devices.
Even though IPv6 doesn't require port forwarding, you can configure some routers with IPv6 port forwarding if either:
1. you want to retain the obviously more secure topology of having a local router to filter and block stuff, or
2. your ISP only issues you one IPv6 address.
As to why it would be impossible to use IPv4 to view the cameras, I have no idea. :)
Thanks for the follow up.... if the Asus router allocates IPv6 addresses and the camera has an IPv6 address shouldn't it be accessible from a browser with http://[IPv6 ADDRESS] ? Was trying it but did not work....
Well, when I got out of direct support IPv6 wasn't used (at least by any of my customers at that time) - so I have no experience with IPv6 remote camera access. :(
But even if the camera was configured with an IPv4 address, device NICs should be able to use either protocol stack (but maybe not both at the same time without some high level technical wizardry) depending on which protocol you are using when trying to connect to the device. So even an IPv4 addressed camera should be able to be seen from outside the LAN - if the gateway device lets it.
Again, my kung fu skills are weak in this arena, but possibly the ISP is only allowing the IPv6 protocol on their WAN.
Hopefully, someone else with IPv6 skills can weigh in on reaching cameras using IPv6 addresses. :)
With IPv6 all the equipemnts shall be compatible with it on the Wan, like when you are doing Multicats in a Lan .... But As most of the time you are in A Lan connected to several sub operators then back to a Lan, IPV6 isn't enable yet on the core operator equipments ( where you find the big Cisco 's) The "TraceT " Dos command illustarted the numberof sub hops your IP packets are doing to rech the target.We all have PC, Cameras and DSL boxes "ready for IPV6"since a while (6 or 7 years now I presume.).. but still not yet relevant .. In theory an IPV4 address can coexist with an IPV6 segment at an operator. Your solution is on the IPV4 side. Discover which port could be used instead of those which are obviously closed by the satellite operator (in the camera, in the NVR) Can you enable DynDns on your remote equipments ?
Agree with Marc, punching a hole in the IPV4 side seems the most likely solution. Jason you said that they were "told by their satellite ISP that it was impossible to use IPv4"', but did they say speciifically that ipv6 was allowed?
Try this: goto canyouseeme.org and put in their ip, then you can try changing the ports around and see if one like 8088 can work..
Then, no router is required, and you can just use switches.
Are you referring to Layer 3 switches? Of course NAT is not required, but surely something still has to 'route' the packet to the appropriate subnet, just like it does thru the rest if the internet's routers today.
P.S. I'm maybe a Gokyu in networking so I'm probably mistaken...