Dahua NVR and Router question about UPnP.

[Gadget -X]

I have UPnP disabled in my Dahua NVR because I have read it has security risks. Do I also have to disable it in my router. My internet provider is fiber and uses an all in one connection and router. I have the ability to turn off in router but not real savvy about these things.

TY

 

[bigredfish]

I’m not a network security guru, but I turn it Off

 

[alastairstevenson]

Do I also have to disable it in my router.

Yes, if you wish to avoid the possibility of the entire internet being able to access devices on the LAN the router is connected to.
This is because, when UPnP is enabled on the router, it gives a device on the LAN that also has UPnP enabled the ability to automatically create a port-forwarding rule on the router, allowing inbound access from anything on the internet.

 

[Gadget -X]

Yes, if you wish to avoid the possibility of the entire internet being able to access devices on the LAN the router is connected to.
This is because, when UPnP is enabled on the router, it gives a device on the LAN that also has UPnP enabled the ability to automatically create a port-forwarding rule on the router, allowing inbound access from anything on the internet.

 

[Gadget -X]

Ty for the replies. I was thinking the same thing. Trying to understand how to remotely view my cameras. Some how I ended up with a hack reserved admin account on a camera. Took all port fwding off and cleaning up router settings. Great forum and members. Ty

 

[VorlonFrog]

Ty for the replies. I was thinking the same thing. Trying to understand how to remotely view my cameras. Some how I ended up with a hack reserved admin account on a camera. Took all port fwding off and cleaning up router settings. Great forum and members. Ty

Lookup TailScale VPN - it's been working very well for me for a few months now. No more router/uPnP issues whatsoever.

 

[Gadget -X]

TY ..Frog. So I ditched the port forwarding. No ports open. I disabled UPnP. I still have DMSS with P2P enable. I can view cameras local & remote. I know that is not ideal. Will look into TailScale next.

M

 

[bigredfish]

You're fine using Dahua P2P, it essentially very similar to Tailscale imho. I use it

Both connect to a 3rd party server for directions if you will to the other device, then all communication is device to device direct.

I use OpenVPN, or Wireguard VPN only when I need to connect to the NVR remotely to manage settings. (both built into my router/firewall appliance.)

For just viewing/playback/download clip remotely, P2P is fine

 

[Gadget -X]

Well up and running. One quick question. All my IP cameras are DCHP assigned. Should I make them static? Vaguely remember something about DHCP vs Static is more secure?

TY

 

[bigredfish]

I have all of mine that are on my LAN assigned static IPs from like 192.168.1.200 up. Less issues with fighting for an IP

Make sure P2P is Disabled on the cameras themselves. Just the NVR needs that access

They all run to a switch that my NVR also connects to

Some smarter network guys here can tell you how to setup and isolate things even better

 

[Gadget -X]

Just to clarify. My cameras are dhcp assigned but are also reserved. Helps me map my ip better and identify assignment issues. Ty