User Manual

When connecting network cameras or video recorders ('IP cameras') to Keenetic routers, you often have to provide Internet access to the cameras' web interface to control and monitor the video stream.

Let's have a look at the three most popular ways to access IP cameras remotely:

Now let's focus on each option in more detail.

Access to IP camera via VPN server at Keenetic

To connect, you will need:

Connect the IP camera to the Keenetic network. Register the device in the Keenetic Web Configurator and assign a static IP address to it. Then enable one of the VPN servers to access the local network — L2TP/IPsec (recommended) or PPTP. We recommend creating a separate user (account) for the VPN connection and using a complex password.

Then connect to the Keenetic VPN server from the Internet. When you connect to Keenetic, you will be able to access the local network, including the camera (you can get access by its local IP address).

We recommend using this method of connection to an IP camera, as it guarantees security when passing traffic over the Internet.

Access to IP camera by configuring port forwarding on the Keenetic

To connect, you will need:

To configure remote access to the IP camera, Keenetic retransmits incoming connections to a specific port or ports of the camera. This connection method does not guarantee security when passing traffic over the Internet. Besides, with this configuration, standard ports can be unlocked on a router with a public IP address, and this is not recommended, because if malicious bots detect such ports, they can lead to heavy 'parasitic' traffic or attack on this address.

Disable UPnP service in the camera and Keenetic settings. To do this, delete the system component 'UPnP service' in Keenetic.

Then configure port forwarding using the port forwarding instruction.

Create a rule(s) by selecting in the 'Input' field the interface you want to use for your Internet connection (in our example, it is the 'Provider' interface). When using a 3G/4G modem, select it from the list.

As both the Keenetic web configurator and the web interface of the IP camera use port 80, let's configure the port mapping to access the web interface of the camera from the Internet on another port (in our example on port 8080).

Then check the port forwarding to the IP camera from the Internet via your browser. In your browser, use the following type of address: WAN_IP_address_Keenetic:port_number

For example 86.87.88.89:8080

You will see the web interface of your camera in a browser.

With our KeenDNS service (in the direct access mode), you can assign your domain name to the Keenetic. In your browser, use the following type of address: domain_name:port number

For example: myrouter01.keenetic.pro:8080

Access the IP camera web interface via our KeenDNS service using a 4th level domain name

This method applies if you have a public IP address to access the Internet (KeenDNS in the direct access mode) and a private IP address (KeenDNS in the cloud access mode).

Configure access to your local network web applications using the example of remote access to home network resources with KeenDNS instruction. There is no need to configure the port forwarding in this case. It will be possible to access the IP camera's web interface from the Internet by using the 4th level domain name (for example, camera.myrouter01.keenetic.pro).

When operating KeenDNS service in cloud access mode, pay attention to the following: