Connecting to Cameras on an Isolated Network (e.g. Exacq UNA or M-Series)

Outlined below are two basic methods to connect to resources on an isolated network, one using PuTTY and the other using MobaXTerm. We will use PuTTY to create a tunnel directly to a single camera (the process needs to be repeated for each camera) and use MobaXTerm to create a socks5 proxy (requiring an additional step of browser setup) to allow us to navigate to any resource available to the NVR via a web browser on our workstation. The second method may be preferable if you are upgrading firmware on all the cameras connected to a 16 channel UNA while using PuTTY may prove to be easier because of its prevalence. These methods can be used to connect to any Linux server to access cameras on an isolated network. The UNA and M are emphasized because of the inherent difficulty they present.

The examples use an M-Series NVR at 172.19.229.41 and a camera connected to its PoE port 1 with the address 192.168.201.2. An arbitrary port is required, and the examples use port 9191.

Prerequisites: SSH must be enabled on the NVR we wish to connect to. Use the Exacq Linux Utilities from the menu on an M-Series or the desktop short cut on an UNA (or any other Exacq Linux NVR). A copy of PuTTY (https://putty.org) or MobaXTerm (a portable edition is available, https://mobaxterm.mobatek.net) must be available on the user’s workstation.

 

Method 1: PuTTY

We start by specifying the address of the NVR we wish to connect to. Next, expand the SSH option on the bottom left and select the Tunnels option. Here we specify an arbitrary port (9191 in the example) and the address and port of the camera that we are connecting to. Press the “Add” button to apply your choices then “Open” to connect. A shell will open prompting for a login and then it will appear to be an ordinary SSH session. Now, to connect to the camera, we will open up a web browser and type 127.0.0.1:9191 in the address bar. You will be immediately prompted for camera login credentials and then have access to the camera’s browser interface just as if you were on the same local network.

Method 2: MobaXTerm

Using MobaXTerm, we start by selecting Tunneling at the top. Choose “Dynamic port forwarding,” and specify the arbitrary port (again, 9191 in the examples) you wish to use, and the NVR’s address and SSH port. Click save then press the “play” icon to create the connection. Next we need to set up our web browser’s proxy settings. Firefox is used in the example. We choose manual proxy configuration, SOCKSv5, and 127.0.0.1 port 9191 for the SOCKS host. Now we can simply type in the IP address of the camera (in this example, 192.168.201.2) in the address bar of the browser. We can browse to any resource available to the NVR with this connection.

Method 3: Using a Linux workstation

If your laptop is running a proper operating system (e.g. any Linux distro), you can simply type the command:

ssh –D 9191 admin@172.19.229.41

Use the same browser proxy settings shown above.

Leave a Reply

Your email address will not be published. Required fields are marked *