Dual NIC setup on your Blue Iris Machine

OK, my son was here and he got things fixed the way I wanted/needed. I now have my NVR streaming my cameras to NIC_2. NVR is isolated from the internet. I can access my NVR's GUI now. And once I updated my NVR's IP address's in Blue Iris, Blue Iris is up and running.

Once I try to copy/translate his notes, I will put some screen shot's up where he some IP Addresses in my NVR. I will have to Full around with some Network settings on NIC_2 if I want to Unplug one of my camera's that was assigned a IP Adress from my NVR. Hopefully I will remember the settings
 
I'm guessing for my son it's like riding a bicycle. Learned about IP Addresses in High School and College over 20 years ago. Took him a few minutes for him to figure out what I was trying to do.

A little off the beaten path from page ONE Settings, but it set-up and working for now.

NVR Setting Below

New NVR Settings for NIC_2.pngipcon fig NIC2 177.168.1.128.png
 
2 quick questions ->

how important is this to do to your BI?

also currently i have BI running at 2 locations, to connect to the one off-site i have to use zerotier, by doing this does anything change ?
 
I am setting up a Dual NIC for my Blue Iris PC and have some question. Also let me know what additional settings I would need to set the NICs on the Blue Iris PC beside setting the static IPs on each NIC. Is there anything else I am missing.
  • With the dual NIC setup can I access the cameras GUI from any PC on 192.168.1.XXX
  • Would there be an issue accessing the cameras on the Blue Iris mobile app connecting through Zero Tier
  • What IP would I access Blue Iris UI3 from any PC on 192.168.1.XXX
  • Would there be an issue with Home Assistant accessing Blue Iris

Current Config
1754760168969.jpeg

Proposed Blue Iris Dual NIC Config

1754761913831.jpeg
 
I am setting up a Dual NIC for my Blue Iris PC and have some question. Also let me know what additional settings I would need to set the NICs on the Blue Iris PC beside setting the static IPs on each NIC. Is there anything else I am missing.
  • With the dual NIC setup can I access the cameras GUI from any PC on 192.168.1.XXX
  • Would there be an issue accessing the cameras on the Blue Iris mobile app connecting through Zero Tier
  • What IP would I access Blue Iris UI3 from any PC on 192.168.1.XXX
  • Would there be an issue with Home Assistant accessing Blue Iris

Current Config
View attachment 226197

Proposed Blue Iris Dual NIC Config

View attachment 226203

On my setup, I have my IPCAM network locked down using VLANS such that the only way to access the cameras is to be on the Blue Iris PC with the dual NICs. I can remote into that pc using UVNC which makes it more convenient. I would suggest doing something similar.

I use Tailscale as my VPN and it works well accessing BI remotely. I assume ZeroTier would also work well if configured correctly.

According to your diagram, you would access BI ui3 at 192.168.1.121:81

I have HA and it communicates well with my dual NIC setup, but you have to make sure your firewall rules are correct. I have HA only access BI and not the IPCAM network.

It looks like your current setup has all your cams on your main network. yikes
 
As mentioned by prsmith777, you would access your 192.168.1.121 BI system from any computer in your 192.168.1.xxx address range, and set up ZeroTier to access 192.168.1.121. Also, to access your cams into your HA system, I use the BI IP Address, along with the camera name within BI. For example, my doorbell cam is called FrontDoor and set it up in the configuration.yaml file as shown below. Note that I'm using a real old version of HA and not sure what changes/improvements they've made, so it may be different but you can test the url like below using VLC.

camera:
- platform: generic
name: FrontDoor
mjpeg_url: still_image_url:
 
I am setting up a Dual NIC for my Blue Iris PC and have some question. Also let me know what additional settings I would need to set the NICs on the Blue Iris PC beside setting the static IPs on each NIC. Is there anything else I am missing.
  • With the dual NIC setup can I access the cameras GUI from any PC on 192.168.1.XXX
  • Would there be an issue accessing the cameras on the Blue Iris mobile app connecting through Zero Tier
  • What IP would I access Blue Iris UI3 from any PC on 192.168.1.XXX
  • Would there be an issue with Home Assistant accessing Blue Iris
  • Your proposed setup is basically exactly like I have my network working past 8 years
    • accessing Camera GUI (at least in my setup) you have todo from the BI PC because the cameras are no longer connected to your primary network. I just pop open RDP (any remote desktop would work) on the "BI Server" and I can freely browse the camera UI's and setup things.
    • Accessing via ZeroTier I just connect my mobile to ZeroTier and then open the BI Servers ZeroTier IP in the apps.
      • any VPN should be possible with the right firewall rules once you "connect" which usually requires you to do something in an app.
      • I use OpenVPN to access home when away as a standard - my mobile IP is 192.168.99.5 when connected to OpenVPN, and I have firewall rule that allows traffic to 192.168.20.X from that network (BI server is 192.168.20.10)
      • I also have ZeroTier. ZeroTier will have it's own subnet and network, so (for example) my mobile is 192.168.196.252 (when connected to ZeroTier) and I have to access BI server at 192.168.196.10. You'll find all that setup in the ZeroTier app and website, but I find it more confusing & also slower than OpenVPN because the ZeroTier IP network addresses I don't have memorized. There will definitely be a 3rd IP address (ZeroTier) on the BI server, and whichever other devices you have on ZeroTier. As far as I know you have to "turn on" ZeroTier to access your network when away.
    • The important thing here is the Blue Iris mobile app is accessing the BI Server, and the SERVER is accessing the camera feeds. From the camera perspective, their "network" is a few other cameras and the 2nd NIC on your BI Server, and that's all they will ever see (provided you dont configure Internet sharing on that BI PC). You will probably want to configure the BI PC to also serve as the timeserver for that camera network to keep them synched since they cannot reach internet time servers after this change.
    • 192.168.1.21 would be the BI IP Address other networked and wireless devices would interact with 100% of the time on your network. When accessing remotely through ZeroTier it would be the ZeroTier network address instead.
      • in my configuration I've split the wireless and wired networks onto separate subnets and BI mobile continues to work fine from both wired and wireless.
    • HA can access BI Server via it's 192.168.1.21 IP without problems, so show video like @concord recommended. They are on the same subnet and local to each other through that NETGEAR 2.5g switch.
 
  • Like
Reactions: MikeLud1
Just wanted to add, a good way to test you settings is navigate to the camera's update settings via the webpage and try using search for updates under manual update, If the settings are correct, the update request will time out.
 
I am setting up a Dual NIC for my Blue Iris PC and have some question.
I would imagine that either IP address of the BI PC can be set up as routable to zerotier. I started using Tailscale so I don't a current Apples to Apples config.
When i casually installed a Lan card in my Dell, Windows seemed to auto-disable or route all traffic thru one by default....doing absolutely nothing to any setting.
SO i bagged the Lan card after awhile. and use a VPN ( tailscale)

1755304099416.png

1755304226901.png
 
Last edited:
  • Like
Reactions: samplenhold
Probably didn't quite get the LAN setting right. The 2nd NIC (camera side LAN) needs to be set up so it cannot contact the main LAN ie it needs to be on a different sub net address, whilst the main BI NIC (PC motherboard LAN in my case), can connect to the main LAN as it should be set up on the same sub net address as the rest of your home network or at least your switch if using a switch to separate out the CCTV side from the rest of your home network, basically it needs an address that will connect to your home router either directly or via a switch if using one. The cameras connect only to Blue Iris which serves as the interface between your home network and the cameras. What you see when you access BI either locally or remotely, is what BI is displaying, not the camera feeds directly. Only BI sees the cameras directly as BI is set up to connect to the 2nd NIC ie camera LAN. To explain further, by using a network address that's different to the main LAN on the 2nd NIC eg. you could use main BI PC LAN of 192.168.10.1 and a 2nd (camera) NIC LAN of 192.168.49.1, the main LAN will be uncontactable from the camera LAN as the Sub Net address will be different ie. 49 vs 10 in this example. This also means you can use DCHP on the main BI LAN NIC as it will only allocate addresses within the same sub net range ie within the .10 range leaving the cameras on .49 still uncontactable. For some reason my router doesn't like static IP's on my BI PC (everything else in the house if fine just not this pc), so I use DCHP on the Main Lan NIC side and a fixed address on a different subnet on the camera side NIC.

Good guide on dual NIC on page 1 here although it only really goes through the 2nd NIC setting which can lead to a little confusion if you don't realise this. I recommend printing it out then annotating it with personal notes for your system.

When doing this I also suggest not making my initial mistake of not noting which LAN Card Chipset is on which network, and writing down the chipset brand of each LAN card used for each respective LAN so eg if motherboard LAN is Realtech and used for the main LAN (I always us MB for main LAN), and the accessory LAN is Qualacom, write that down. That way if you have any issues, you can easily identify which LAN Card is which as that really helps when checking or re-doing the settings, as Windows Network settings identify by name and chipset brand. Name can be unreliable as it's user assigned if you deviate from the default Network 1, 2 etc. but it can change if windows has a glitch after eg a power outage whereas chipset brand always stays the same in the Windows Networking Page. I've found sometimes after a power outage, LAN cards can lose data such as change network address to a random or default address or lose manually added camera addresses thus making the cameras uncontactable or uncontactable via web browser. After a power outage, any issues, 1st place to start is walk through and check the address settings on both NIC's as it could be Network addresses have defaulted or been removed.

PS John, your full name and email address is on display in your screenshot above.
 
Last edited: