Multiple IPv4 Address on One Interface
-
I setup my LAN network to be in 192.168.10.1/24. From time to time, I buy a new security camera that come with the static IP 192.168.1.108. Is there anyway I can setup pfSense to see this device so I can log into the Web GUI and change the camera's static IP?
-
Any reason you can't change the camera's IP?
-
Changing that camera's IP address to one that falls in the 192.168.10.1 DHCP range is my desired outcome. The issue I have to overcome is connecting to the camera's Web interface for the first time. In the past, I find an old laptop, force it's IP to 192.168.1.5. Then I log into the camera and change it's settings to use my DHCP to assign the IP. I was hoping that I could somehow bypass that step and just connect my camera to my network and access the address 192.168.1.108. Maybe something with a Virtual IP Address but I haven't figured out if that is possible yet.
-
While pfsense supports aliases, another method I have used is to create a static arp for the device, so you can give it any address you want. Also, some cameras have a configuration app that can find the camera, no matter what the assigned address.
-
@archedraft
Of course you can assign an additional subnet to an interface.
Go to Firewall > Virtual IPs and add an IP Alias which is within the subnet of the cam.
However, in addition you have to add an outbound NAT rule translating IPs in outgoing packets to that virtual IP.So I'd rather take a notebook or computer and set it an IP in the cams subnet.
-
What camera's do not default to dhcp? Curious..
While sure many iot type devices may fall back to a default 192.168 address if no dhcp server..
Why would you not just let it come up dhcp - then move this dhcp address to a reservation so it has an ip you want it to have on your network vs just a dhcp one.
I do this with all of my iot devices. I just setup 8 new lightbulbs.. Let them come up dhcp, and then just set their reservations to be specific. Did this with 2 echo dots as well - couldn't pass up the 19$ for the 3rd gen dots.. So put one in the kitchen and guest room.
Sure you can create vip on pfsense to be on whatever network you want. But how does that help you connect to the camera? Is this on some specific vlan and your doing source natting while you connect to it from some other vlan where your pc/laptop is that your connecting to the camera?
You could also just setup a 2nd IP on your pc/laptop to allow you to connect to these devices with the wrong IP, etc.
-
@JKnott Good call on the configuration app! I forgot about that. Makes life much easier.
-
Actually, a lot of them aren't even capable of DHCP. I set up a lot of Axis cameras and had to do what I mentioned. Either use a static arp for the MAC address or use the setup app. IIRC, Hikvision cameras were the same.
-
@johnpoz Dahua, Hikvision, and any of the rebrands of those brands come with that static IP. I agree, it is strange to not just set them to default to DHCP. My understanding is that those cameras are not really meant to be sold to home owners, the intended buyer is a business that will install them on office buildings, etc. I wonder if the installers prefer to always know what the IP will be as they install the cameras and change them at that time.
-
That is just moronic.. So I want to setup say multiple camera's - they all just default to the same IP? Even if there is a dhcp server on that network? That is beyond stupid!
-
When I installed cameras, I'd have a list of each camera, it's MAC address, IP address and location. I'd then configure the address as per list and then install them. Also, the customers wanted the record of exactly where every camera was. The cameras also came with 2 MAC address stickers, one of which went on the list and the other on the installation location.
-