Can't access NVR (public IP) when connected to access point!

[Alphasteve]

Hi community,
We have a minor issue with our pfSense setup. We use an app on our phones to access our security cameras and in that app we use our static IP provided by our ISP to connect to work when external. Accessing the cameras externally we have no issues at all. But accessing them while connected to our internal access point we get blocked. We can only connect if we change to the internal local address or if we deactivate the phone's wi-fi. So basically, cell phone connects when on LTE network but not Wi-Fi when at work!
Just tested for fun remote desktop using the static IP from our ISP and it also blocks us but only internally, works when outside the network and no issues with internal addresses. So this eliminates our access point being blocked.

 What would be preventing this weird blockage?

Our setup is;

Modem (Static IP) - pfSense - Netgear switch - wired devices - access point (DHCP off) - wireless devices

Thanks!

[viragomann]

If you have forwarded the cam access by a NAT rule you may enable NAT reflection in the rule or globally in the System > Advanced settings and allow the access on the incoming interface.

[Alphasteve]

Well that worked perfectly! Thank you!
There aren't any big security risks doing it this way? This only affects the forwarded ports we added in NAT & Rules?

[Alphasteve]

@viragomann Well that worked perfectly! Thank you!
There aren't any big security risks doing it this way? This only affects the forwarded ports we added in NAT & Rules?

[viragomann]

As mentioned the access can be still controlled by firewall rules. You can allow here what you need.
There is no more security risk than if the clients access from outside.

[Gertjan]

@Alphasteve said in Can't access NVR (public IP) when connected to access point!:

We use an app on our phones

Like, by any chance, IDMSS PLus ?

[Alphasteve]

@Gertjan iVMS-4500 HD For Hickvision!