Enabling UDP ports for CCTV NVR

[B_i_B]

I am trying to set up my Reolink CCTV NVR for remote viewing while I am away from my house. In the house using wifi everything works fine. Remote viewing did work fine with a previous router (Vodafone) and required no changes to any settings. Since changing to the BT Smart Hub 2 I have not been able to view anything remotely.

I contacted Reolink support and they replied that to connect to the NVR using UID (where I type in a 16 figure ID) I need to “please enable UDP port 0-65535”. After a bit of further searching I think this might be a typo as I found reference to ports 1-65535.

My issue is how do I do this?

I have gone to the firewall settings and added a new rule, called it CCTV, selected the NVR as the device (and made sure it’s IP and MAC are as expected) and then in both the external and internal start and end ports I entered 1 and 65535, I set the protocol to UDP and saved it.

I tried to view the cameras on my phone (after turning off phone wifi) and got “Connection failed”

I have rebooted everything that can be, and even temporarily disabled the router firewall, but still could not connect. Turned phone wifi back on and I can connect without issue.

Have I “enabled UDP ports” correctly or have I made some other rather glaring error?

I would be grateful for any guidance!

[TimCurtis]

@B_i_B 

Does this link help?

Presumably you've got a DDNS set up in the NVR.

[B_i_B]

Thanks for your reply.  The link you sent explains connecting using the IP address. Reolink provide a UID method that is "supposed" to be far more straightforward - you enter a 16 figure  and apparently the NVR allocates a random UDP port - hence having to enable them all I suppose.

Please be aware that whilst I am using all of these acronyms and terms, I can't admit to really understanding them and so the answer to your question about DDNS is "not sure".  In the advanced settings for the NVR "Enable DDNS" is turned on but when I go the DDNS settings there are 2 options, NO-IP and DynaDNS but neither have any entries (server, user name etc).  I have never changed this either and it all worked fine when I used the Vodafone router - but this may or may not be relevant.

[DarrenDev]

You've not mentioned what model you're using, but does it offer a UPnP option? This would be much better, as the device would update the firewall itself just for the port(s) needed:
https://support.reolink.com/hc/en-us/articles/900003769826-How-to-Enable-and-Disable-UPNP-for-Reolin...

[B_i_B]

Hi @DarrenDev 

The model is Reolink RLN8-410 and it has worked correctly and permitted remote viewing with a previous router - so my thoughts would lead to the settings on the Smart Hub 2 since that is the only thing that has changed.

However, yes it does have UPnP and it is already turned on (and always has been to my knowledge) - image of advanced settings attached.

Thanks

[DarrenDev]

On your SH2, is UPnP still enabled? (Advanced settings > Firewall > Configuration)

[B_i_B]

Yes it is, and so is "Extended UPnP security"

[DarrenDev]

Can you guess what I'm going to suggest next? 😝
What happens if you turn the extended security off, and then reboot your NVR?

[B_i_B]

Unfortunately, no change - still "Connection failed"

[DarrenDev]

I assume in the port forwarding screen, you're not seeing any entries? It would normally add greyed out entries for rules that have been automatically added. It's worth also checking the event log on the SH2 to see if there are any clues about why the rules are maybe being blocked?

I'm not currently using my SH2, so can't remember all the logs that are added. I have a few UPnP devices though (including some cameras) and they've always worked fine.

You could maybe also try something like MiniUPnP (google it) to test that UPnP is actually working, to (dis)prove that the issue is with the NVR.