It might be possible if all that needs to happen is to modify the flags field for the alert to include "AI Confirmed". I'd have to try it and I'm too busy right now, but I will make a note.
If you are concerned about network security (and it sounds like you need advice pretty badly), might want to dig through existing posts on this site in that regards. Many folks ask those same questions and many folks respond with valued suggestions and opinions. Start searching & researching before you end up on YouTube hacked security camerasI had some security problems with my cams a while ago (passwords were reset, etc). If I recall correctly, the cameras automatically opened ports on my router. There was some function to disable this feature and since then all camera problems disappeared. However, I also lost connection to my home automation system, streaming services, etc since all ports were shut down. Now I just use a VPN connection if I need to connect to my system at home. But I am considering changing my PoE switch to a fanless "smart" (that allows VLANs) one. 16 port smart PoE switches without fans are not easy to find at "reasonable" prices, though.
Maybe clear as murky water.If your cameras are on the same subnet as the rest of your network they are exposed to the internet. By adding a second NIC you can put your cameras on their own subnet that isn't routed to the Internet. This way they can't call home. You'll need to put a second NIC in the computer you use to manage the BI computer if you want to do so remotely. A NIC can only access one subnet at a time. Adding asecond NIC means the computer can access 2 different Subnets at the some time but only one of these is connected to the Internet, the other to the cameras. Clear as mud?
I had some security problems with my cams a while ago (passwords were reset, etc). If I recall correctly, the cameras automatically opened ports on my router. There was some function to disable this feature and since then all camera problems disappeared. However, I also lost connection to my home automation system, streaming services, etc since all ports were shut down. Now I just use a VPN connection if I need to connect to my system at home. But I am considering changing my PoE switch to a fanless "smart" (that allows VLANs) one. 16 port smart PoE switches without fans are not easy to find at "reasonable" prices, though.
OK, great. I think I follow that. So the internet side NIC on the BI computer would get it's IP info and subnet from the router via DHCP. Since the second NIC is not connected to a router (only to the POE camera switch), do I set the camera subnet within the NIC IPv4 properties like this:Most of us run headless BI computers.
We use Remote Desktop (RDP) or some other similar application to log directly into the BI computer from another device.
UI3 is on the BI Computer, which has two IP addresses under the dual NIC setup - Camera IP addresses on one NIC and an Internet IP address on the 2nd NIC. You would access UI3 from the LAN the exact same way using the exact same IP address you use now to access UI3, the only difference is the cameras are no longer on the same IP address as the rest of your system.
All you would do is add the 2nd NIC to your BI computer and assign it an IP address range that is not the same IP address range as you current LAN. Then you change the IP addresses of the cameras in the camera GUI and in BI and you are good to go.
So if your existing internet LAN is 192.168.1.xxx, just change the cameras to 192.168.2.xxx and then you are only changing one number in your already existing setup in the cameras and in BI.
Another NIC can be had for $10-$20 and is a cheap investment in keeping cameras off the internet.
I am currently setting the BI computer and all the cameras with a static IP assigned from the router, but I can change that. I never tried this before because I always thought that I wouldn't be able to access the web interface from any of my LAN computers except the BI machine. Now I know better and I think I'm going to make this change this weekend. Thank you for all of your help.That would be correct - and yes go into each camera and manually assign them an IP address (which you should have been doing anyway so that the router wouldn't change the IP and then BI cannot find them). Then go into the BI camera setting and simply change the IP address to the new IP for each camera.
But you should also manually assign an IP address to the BI computer for internet as well. Maybe you have just got lucky that your router hasn't changed it and then you couldn't get into UI3 or BI find your cameras.
It's the best cheapest easiest way to secure your camera network so good luck!I am currently setting the BI computer and all the cameras with a static IP assigned from the router, but I can change that. I never tried this before because I always thought that I wouldn't be able to access the web interface from any of my LAN computers except the BI machine. Now I know better and I think I'm going to make this change this weekend. Thank you for all of your help.
Thanks for these tutorials, wittaj. I imagine that as soon as a camera's IP is statically set and changed, then the GUI login fails, and a person would have to log into the camera's new IP.Yeah setting the BI computer to a static in the router is fine. Obviously your cameras will not be able to do that after you take them off the router, but it is a simple procedure to assign them a static in the camera GUI and then change the IP address in BI for each camera.
You will probably see some improved performance of your home internet after you take the cameras off of it.
That would be correct!Thanks for these tutorials, wittaj. I imagine that as soon as a camera's IP is statically set and changed, then the GUI login fails, and a person would have to log into the camera's new IP.
Hey @wittaj, so my existing setup is basically a tower and monitor in my basement with a POE switch connecting cameras and everything together. My cameras are isolated from the internet by my router- I've got into each one and blocked access to the internet and use a VPN to connect to my BI pc from outside of the house.Most of us run headless BI computers.
We use Remote Desktop (RDP) or some other similar application to log directly into the BI computer from another device.
UI3 is on the BI Computer, which has two IP addresses under the dual NIC setup - Camera IP addresses on one NIC and an Internet IP address on the 2nd NIC. You would access UI3 from the LAN the exact same way using the exact same IP address you use now to access UI3, the only difference is the cameras are no longer on the same IP address as the rest of your system.
All you would do is add the 2nd NIC to your BI computer and assign it an IP address range that is not the same IP address range as you current LAN. Then you change the IP addresses of the cameras in the camera GUI and in BI and you are good to go.
So if your existing internet LAN is 192.168.1.xxx, just change the cameras to 192.168.2.xxx and then you are only changing one number in your already existing setup in the cameras and in BI.
Another NIC can be had for $10-$20 and is a cheap investment in keeping cameras off the internet.