Problems Accessing An Ipv6 Camera

Hello IPVM

Was talking with a client who was told by their satellite ISP that it was impossible to use IPv4 to view their Sony SNC-CX600W camera from outside the LAN. The client is using an Asus RTN53 which supports IPv6.... question is how and if it is possible to access the camera from outside the network?

It is also apparent that IPv6 does not need port forwarding.... is this because the device is directly on the internet with no "routing" aside from it's allocation of an IPv6 address from the DHCP server?

Any insights would be great

IPV6


Jason,

Because of it's structure, IPv6 has 340,282,366,920,938,463,463,374,607,431,768,211,456 combinations.

Many, many more than will ever be needed. For that reason, if your ISP is using IPv6, they will generally assign you as many addresses as you need (hundreds easily) and each of your devices can use a unique (public) address. Then, no router is required, and you can just use switches.

Because the IPv4 structure 'shares' one public IP address, the LAN router can (and does) act as a firewall - since all traffic has to pass through it to reach the local IP-addressed devices.

Even though IPv6 doesn't require port forwarding, you can configure some routers with IPv6 port forwarding if either:

1. you want to retain the obviously more secure topology of having a local router to filter and block stuff, or

2. your ISP only issues you one IPv6 address.

As to why it would be impossible to use IPv4 to view the cameras, I have no idea. :)

Hi Marty

Thanks for the follow up.... if the Asus router allocates IPv6 addresses and the camera has an IPv6 address shouldn't it be accessible from a browser with http://[IPv6 ADDRESS] ? Was trying it but did not work....

Well, when I got out of direct support IPv6 wasn't used (at least by any of my customers at that time) - so I have no experience with IPv6 remote camera access. :(

But even if the camera was configured with an IPv4 address, device NICs should be able to use either protocol stack (but maybe not both at the same time without some high level technical wizardry) depending on which protocol you are using when trying to connect to the device. So even an IPv4 addressed camera should be able to be seen from outside the LAN - if the gateway device lets it.

Again, my kung fu skills are weak in this arena, but possibly the ISP is only allowing the IPv6 protocol on their WAN.

Hopefully, someone else with IPv6 skills can weigh in on reaching cameras using IPv6 addresses. :)

Follow up: Did you attempt to hit the default gateway's IPv6 address (after first setting up IPv6 port forwarding to the IPv6 address of the camera on the gateway)?

With IPv6 all the equipemnts shall be compatible with it on the Wan, like when you are doing Multicats in a Lan .... But As most of the time you are in A Lan connected to several sub operators then back to a Lan, IPV6 isn't enable yet on the core operator equipments ( where you find the big Cisco 's) The "TraceT " Dos command illustarted the numberof sub hops your IP packets are doing to rech the target.We all have PC, Cameras and DSL boxes "ready for IPV6"since a while (6 or 7 years now I presume.).. but still not yet relevant .. In theory an IPV4 address can coexist with an IPV6 segment at an operator. Your solution is on the IPV4 side. Discover which port could be used instead of those which are obviously closed by the satellite operator (in the camera, in the NVR) Can you enable DynDns on your remote equipments ?

Are you sure you can even ping that v6 address from outside of the network? Also the v6 address might not correctly redirect to a live view page? Try accessing a /setup or /admin page.

Agree with Marc, punching a hole in the IPV4 side seems the most likely solution. Jason you said that they were "told by their satellite ISP that it was impossible to use IPv4"', but did they say speciifically that ipv6 was allowed?

Try this: goto canyouseeme.org and put in their ip, then you can try changing the ports around and see if one like 8088 can work..

Hi All

The camera IPv6 does respond to pings..... defaukt gateway does not.

http://www.subnetonline.com/pages/ipv6-network-tools/online-ipv6-ping.php

The DDNS that was on the modem responded to pings as well but returned a different address than what showed on Whats My IP.

The camera IPv6 does respond to pings..... defaukt gateway does not.

From the internet or lan?

Internet

Then, no router is required, and you can just use switches.

Are you referring to Layer 3 switches? Of course NAT is not required, but surely something still has to 'route' the packet to the appropriate subnet, just like it does thru the rest if the internet's routers today.

P.S. I'm maybe a Gokyu in networking so I'm probably mistaken...

actually, I was just referring to the lack of any need for NAT (done by the router in IPv4 - which owns the only public address).

For configuring LANs using link-local addressing in IPv6 (so each LAN device uses the same gateway device) check this out:

IPv6 deployment: Using link-local addresses as default gateway

and as far as my level of kung fu in IPv6.... I didn't make the video (but i was close)

That's not funny. The 3rd guy is my dad.

Hi Sean

Hughes sattelite suggested using IPv6 .... got this answer from Asus http://support.asus.com.cn/Search/KDetail.aspx?SLanguage=en&no=C1F76B79-98EF-159B-26C8-E19EBB508A99&t=2

not sure this would work with network/IP cameras

the camera did respond to pings during the weekend but currently does not

Can you disable the v4 address/portion of the NIC? The camera might not handle dual stacked networks well/properly.