Wireless Webcam Access to Wired NAS
-
Finger79 - Thank you for the in-depth response. I appreciate your time.
- I felt the same way when I read in another post, I can’t remember where, why I should be setting a DHCP Static Mapping when my devices already have a static IP address set in the devices themselves and those addresses are outside of any DHCP pool. I will remove the LAN and WLAN static mappings.
- The reason I set a Protocol of any on the WLAN was an attempt to find what protocol the cam will use to access/record data to the NAS so that I could set just that protocol.
- Thanks for the direction on the Firewall | Aliases. Great idea since I will be adding more webcams. Very useful! Interestingly though, I created an alias for Webcams adding the host’s IP addresses in the IP tab. When I go to Firewall | Rules | WLAN | Add, I don’t see the Webcams alias in the Source dropdown. Any ideas?
- Where would I enable logging at and find the log?
- I’ve removed the wired LAN rule as you suggested.
- I will check all of the NAS and webcam settings again using your suggestions.
- In the Services | DNS Resolver settings, I’ve checked both entries you suggest. As well, the Network Interfaces and Outgoing Network Interfaces are set to All.
johnpoz - Thank you for the response too.
- LAN Interface: 192.168.1.1/24
- WLAN Interface: 192.168.2.1/24
- Wireless access point: 192.168.2.2 (static)
- webcam IP: 192.168.2.100 (static)
- NAS IP: 192.168.1.130 (static)
- The only other rule on the WLAN is:
Action: Pass
Disabled: unchecked
Interface: WLAN
Address Family: IPv4
Protocol: any
Source: WLAN net
Destination: any - The wired LAN rules are now just the default pfSense installation rules. I just deleted the LAN rule for the wireless.
- I’ll try the any any rule on WLAN as you suggested.
- I do know the webcam is authenticating to the wireless access point as I’m receiving emails from motion triggered events.
JKnott - Thank you for the response as well.
- When I initially created a Static Mapping, the IPs for my devices were outside the DHCP pool. Those static mappings are now deleted.
-
- Thanks for the direction on the Firewall | Aliases. Great idea since I will be adding more webcams. Very useful! Interestingly though, I created an alias for Webcams adding the host’s IP addresses in the IP tab. When I go to Firewall | Rules | WLAN | Add, I don’t see the Webcams alias in the Source dropdown. Any ideas?
In the firewall rule, the Source is still "Single host or alias" then in the Source Address field, just start typing the name of the alias. It'll then populate with all the possible choices.
- Where would I enable logging at and find the log?
There's a section called "Extra Options" in every firewall rule. Check the checkbox for "Log packets that are handled by this rule."
-
Well if your getting emails.. Then seems more like a issue with access to your nas vs any sort of firewall rule. Why don't you just sniff and see if the webcam even tries to talk to your nas?
Since you setup your IP static, you sure you setup your gateway correct on both devices. What happens if use a laptop on your wlan and try and access your nas?
-
Finger79 - I was able to find my Webcams alias in the firewall rules with your directions. Very nice. I was also able to find how to log the packets as well. Thank you.
johnpoz -
- The gateway for my LAN is 192.168.1.1 which I have set in the NAS.
- The gateway for my WLAN is 192.168.2.1 which I have set in the webcam and also as the primary DNS server IP address in the webcam.
- I'm able to get to my NAS by wired LAN.
- I tried connecting to my NAS with my laptop on my WLAN and wasn't able to reach it or ping it.
- I was able to ping my pfSense WLAN interface/gateway of 192.168.2.1 from my WLAN connected laptop.
- I was able to ping my pfSense LAN interface/gateway of 192.168.1.1 from my WLAN connected laptop.
-
Post up PICTURES of your wlan rules!!
Can the nas ping stuff on your wlan network that is either wired or wireless? Also keep in mind any software firewalls running on nas or laptop that prevents connectivity from outside local network.
-
- I attached a pic of my WLAN rules as you requested.
- I will have to SSH into my NAS to be able to ping out to the WLAN.
- I was able to ping from my LAN computers to my WLAN Roku. Nothing blocking there.
![firewall - rules - wlan.jpg](/public/imported_attachments/1/firewall - rules - wlan.jpg)
![firewall - rules - wlan.jpg_thumb](/public/imported_attachments/1/firewall - rules - wlan.jpg_thumb) -
johnpoz -
- After a bit of testing, I was able to confirm that I can ping from my NAS to the wireless webcam with no issues.
- Should the gateway setting in the wireless webcam be 192.168.2.1 or 192.168.1.1? I have it set to 192.168.2.1.
-
You do understand your allowing to .130 is completely pointless since you have a any any rule on your wlan..
As to your gateway. How could the webcam gateway be 192.168.1.1 if its in the 192.168.2 network…
Dude pfsense is not doing anything with your writing files to your nas.. Why don't you sniff on pfsense and see what is happening, is it even trying to write the files - is it getting access denied, etc..
-
@jimen85 you're posting in a thread that's playing dead for 2 years now .... that like : subject closed.
Also : If you understand that "the Webcam with ip can only be used from the PC" why are you asking if the same webcalm can be accessed from "mobile phone or other device as a tablet".
If the webcam can only be accessed from the "PC", then that's it : only that PC, not the tablet or mobile phone.If things are not clear : open a your own post, detail your situation and the forum members will reply.
-
This post is deleted!