Dahua NVR and Router question about UPnP.

Gadget -X

Gadget -X

Getting comfortable
Apr 23, 2018
223
77
I have UPnP disabled in my Dahua NVR because I have read it has security risks. Do I also have to disable it in my router. My internet provider is fiber and uses an all in one connection and router. I have the ability to turn off in router but not real savvy about these things.

TY
 
I’m not a network security guru, but I turn it Off
 
Gadget -X said:
Do I also have to disable it in my router.
Click to expand...
Yes, if you wish to avoid the possibility of the entire internet being able to access devices on the LAN the router is connected to.
This is because, when UPnP is enabled on the router, it gives a device on the LAN that also has UPnP enabled the ability to automatically create a port-forwarding rule on the router, allowing inbound access from anything on the internet.
 
  • Like
Reactions: looney2ns, VorlonFrog and bigredfish
alastairstevenson said:
Yes, if you wish to avoid the possibility of the entire internet being able to access devices on the LAN the router is connected to.
This is because, when UPnP is enabled on the router, it gives a device on the LAN that also has UPnP enabled the ability to automatically create a port-forwarding rule on the router, allowing inbound access from anything on the internet.
Click to expand...
 
Ty for the replies. I was thinking the same thing. Trying to understand how to remotely view my cameras. Some how I ended up with a hack reserved admin account on a camera. Took all port fwding off and cleaning up router settings. Great forum and members. Ty
 
  • Like
Reactions: bigredfish
Gadget -X said:
Ty for the replies. I was thinking the same thing. Trying to understand how to remotely view my cameras. Some how I ended up with a hack reserved admin account on a camera. Took all port fwding off and cleaning up router settings. Great forum and members. Ty
Click to expand...
Lookup TailScale VPN - it's been working very well for me for a few months now. No more router/uPnP issues whatsoever.
 
  • Like
Reactions: alastairstevenson
You're fine using Dahua P2P, it essentially very similar to Tailscale imho. I use it

Both connect to a 3rd party server for directions if you will to the other device, then all communication is device to device direct.

I use OpenVPN, or Wireguard VPN only when I need to connect to the NVR remotely to manage settings. (both built into my router/firewall appliance.)

For just viewing/playback/download clip remotely, P2P is fine
 
  • Like
Reactions: Gadget -X
Well up and running. One quick question. All my IP cameras are DCHP assigned. Should I make them static? Vaguely remember something about DHCP vs Static is more secure?

TY
 
I have all of mine that are on my LAN assigned static IPs from like 192.168.1.200 up. Less issues with fighting for an IP

Make sure P2P is Disabled on the cameras themselves. Just the NVR needs that access

They all run to a switch that my NVR also connects to

Some smarter network guys here can tell you how to setup and isolate things even better
 
  • Like
Reactions: VorlonFrog
You did help. I have a good candidate if I have any issues with unauthorized access come up.

I ended up disabling UPnP & port forwarding from my router and using DMSS and P2P on my NVR. If any issues come up Tailscale will be the next step.

TY

M
 
You must log in or register to reply here.
Top Bottom