Remote Access to NVR

[foodtech]

We have vendor-provided Hikvision NVR-camera systems at our non-profit. When the vendor installed the systems they port forwarded to the NVR so the manager could remotely view the camera feeds. We did that until I found this site. (I'm volunteer IT support.) Port forwarding is now disabled, but the manager wants remote viewing capability back.

Making my way through the VPN Primer and other threads; think I understand what to do (generally). Our gateway/router doesn't support OpenVPN so I'm looking to run OpenVPN a PC that is always on. Eventually, NVR will be replaced with BI and that PC will also run OpenVPN.

Would be grateful if someone can look over the attached diagram and let me know if I'm on the right track. (IPs are notional standins for the real ones.) Suggestions welcome. Thanks very much.

 

[SouthernYankee]

can you seperate the gateway and the router. By that I mean put the gateway (modem) into passthrough mode.
Who is the internet provider and whatis the make model of the current gateway router ?
How may users / devices do you have on the inside or the gateway router (devices at the non profit) ?

I do not know how to set up openVPN on a PC, i use an Asus router

 

[58chev]

If you head over to the OpenVPN website, the server software need to be installed on a PC running UNIX / Linux flavour. Will not run on a Windows based PC. So forget about running it on the same PC as BI.

You are best if your internet provider's router/modem can be placed in "Bridged Mode" and use a router that has OpenVPN built in.

There is a way to run a user purchased router behind your provider's router in "Double NAT" mode to run OpenVPN.

 

[foodtech]

Appreciate the replies. Have been out of town. We have Centurylink as ISP using a Zyxel C1100z modem/router. Only two PCs on the LAN plus a music streaming box. We can buy a new router and set gateway to bridge mode; I was just hoping to avoid the additional expenditure. Most of the routers I see recommended are high end gaming devices; are there any recommended budget routers that provide VPN support?

Are you sure about OpenVPN only running on UNIX/Linux? The first entry in the VPN primer states

if you have an always on PC-NVR it can also run it on there with great performance capabilities, or on a dedicated VPN appliance such as a Raspberry Pi

The OpenVPN downloads page has a Windows installer option for OpenVPN 2.4.7. Also, see Easy_Windows_Guide – OpenVPN Community. These imply Windows PC compatibility to me.

 

[looney2ns]

Appreciate the replies. Have been out of town. We have Centurylink as ISP using a Zyxel C1100z modem/router. Only two PCs on the LAN plus a music streaming box. We can buy a new router and set gateway to bridge mode; I was just hoping to avoid the additional expenditure. Most of the routers I see recommended are high end gaming devices; are there any recommended budget routers that provide VPN support?

Are you sure about OpenVPN only running on UNIX/Linux? The first entry in the VPN primer states
The OpenVPN downloads page has a Windows installer option for OpenVPN 2.4.7. Also, see Easy_Windows_Guide – OpenVPN Community. These imply Windows PC compatibility to me.

https://www.amazon.com/Dual-Band-Ai...words=68u&qid=1555268474&s=electronics&sr=1-1

https://www.amazon.com/Asus-Rt-Ac66...words=68u&qid=1555268474&s=electronics&sr=1-2

 

[foodtech]

Thanks Looney2ns. Decided to go the same route Friday so ordered an Asus router based on earlier post by @fenderman.

if you are not going to be using any of the advanced features like vlan/multiple lans to segregate your network, then you will be better off with a modern asus router running open vpn that can be had for 75 or so..note these business routers are often a pain to configure (I have no experience with that model)...for example this is only 67 dollars..https://www.amazon.com/RT-ACRH13-Du...F8&qid=1508905938&sr=1-4&keywords=asus+router