Guest Network issue which I can’t resolve

gonegreynow

gonegreynow

gonegreynow

Associate
Joined
30 Nov 2013
Posts
58
Good afternoon,
Quite some time ago, I had some great help on OC concerning choices for my first home security cameras.
I now have two - both Reolink. POE and wired, not wireless.
My current issue is that I am using a guest network on my Router and via a POE switch, I have connected my 2 security cameras.
Into the same switch, I have also connected an ethernet cable, to carry the signal from the cameras/switch back to the router.
This wired connection back to the router is on LAN port 4 which, on my router, can be ‘isolated’ to Guest. This is what I have done.
So I have, what I thought would be, a situation where I could access the camera feed on my mobile devices but only by logging on to the Guest network.
Seemed very logical to me.
Although this works for a while (main wifi network - no connection; guest network - camera output visible), the situation does not last for long and all of a sudden, I seem to be able to access camera footage on both main and guest wifi networks.
This happens randomly, without any obvious changes to settings, firmware or cabling.
I am either doing something wrong with my setup or there are elements of networking that I simply don’t understand.
Any help would be much appreciated because this whole situation is driving me nuts.
Especially as yesterday, everything was working as intended but today, camera footage can be accessed by logging on to either the main or guest wifi networks which is not what I want to happen.
I’m trying to ‘isolate’ the cameras onto the “Guest”.
 
Avalon said:
It might help if you told us which router you are using for starters.
Click to expand...
My apologies.
It’s a Fritzbox 7530 which allows me to “isolate” the Guest network onto LAN port 4. (so Guest can either be wired or wireless).
I’ve changed the setting in my router to permit this, then connected a cable from Lan 4 to my POE switch.
The only other 2 devices plugged into my switch are my 2 POE cameras.
Thanks
 
Is anything else plugged into that PoE switch or is it just the cameras? What's the model of the switch? Can you share a diagram? Something drawn in paint will be fine, we just want to see what devices are connected to what other devices and where those cables are connected.

When you access the cameras, how do you do that? Via a web browser? If so, by entering an IP address? When you can access them from both networks is that IP address the same as when you can only access it via the guest network?

Having stuff on a guest network accessible from a different network isn't uncommon, there's definite use cases for it but it's strange that it's inconsistent.
 
the-evaluator said:
Is anything else plugged into that PoE switch or is it just the cameras? What's the model of the switch? Can you share a diagram? Something drawn in paint will be fine, we just want to see what devices are connected to what other devices and where those cables are connected.

When you access the cameras, how do you do that? Via a web browser? If so, by entering an IP address? When you can access them from both networks is that IP address the same as when you can only access it via the guest network?

Having stuff on a guest network accessible from a different network isn't uncommon, there's definite use cases for it but it's strange that it's inconsistent.
Click to expand...
Hi. Thanks for getting back to me. I’ve just scanned a sketch of the layout but am having issues trying to upload it. Wanting me to input an http location and I have no idea. Had hoped to just upload a PDF/jpeg from my laptop. Will keep trying.
In the meantime;
Switch
Is a Netgear GS308EP. 8 ports. It’s a layer 2 switch, I believe.
I have the cable connection from the router into port 8 on the switch (at the router end, this is LAN port 4 - Guest)
In ports 6 and 7 of the switch (POE enabled by me), I have ethernet cables to each of my 2 cameras.
The only other kit which ever gets plugged in to this switch (sometimes) is a spare laptop. This has Reolink windows client loaded and I can use this to view/download camera footage.
Camera access
I’ve never been able to access footage via a web browser - even though I know it’s possible.
I access footage either by my laptop (Windows client software) or IPAD/Android phone using Android/IOS apps.
IP addresses
According to Reolink, their cameras use DHCP and the IP is assigned by the router (I don’t know if this is standard for all POE cameras).

Any pointers or guidance much appreciated. I am rapidly getting to the point where I fear that solving this is beyond my ability/comprehension. I am even now thinking about using an old wifi router (not internet connection) as stand alone so that I can at least see camera footage whilst my phone/IPAD is in range of the router.
 
You'll need to upload the image to an image hosting site (I use www.freeimage.host) and then get a share link from there and paste it into the box that was asking for an HTTPS location.

I think I understand your physical setup well enough from what you've said. I was wanting to check that you didn't have 2 cables from the router connected to the switch.

The IP address that the Reolink software is using, is it using the same IP address in both situations? So when you can ONLY access the cameras from the guest network and when you can also access them from the main network? What are the first 3 octets (x.x.x.x) of the IP address/addresses? I'm sure they're private addresses but want to confirm that before asking you to potentially post a public IP on here.

I'm wondering if the router is really creating a separate guest network (so different IP range from your main network) or if it's using the same IP addressing and firewalling the devices on the guest network. It'd be good if you can post the IP address of a client that's connected to the main network. Same point as above though, just the first 3 octets first.

It sounds like the router is the issue here. That's what gives out IP addresses and manages how traffic flows about the place.
 
Thank you for taking the time to reply. I appreciate the advice about image hosting and I will have a look at this.
I think the router is probably creating a guest network because anything attached to it is allocated an IP address in a different range to that allocated to main network devices (the third octet of numbers on the Guest is one number greater than the third Octet of devices on the main network).
I’d prefer to give details by PM if that’s OK?
 
the-evaluator said:
Fine with me if you share the details by PM. I'd be very surprised if the IP addressing needs to be redacted but go for it.
Click to expand...
Thank you.
PM on way. No hurry - literally any advice would be appreciated. Thanks.
The last hour has seen me re-boot and then re-boot again and along the way, some cable swapping.
Some modest progress has been made in terms of knowing what wifi devices will/will not connect but what I’ve discovered makes very little sense to me.
Here is where I’m at;
The cameras are both on Guest. (IP range confirmed).
If I switch all mobile devices (one using Reolink IOS app, the other Android app) then both cameras are viewable on both devices. This is what I expect to see.
But when I switch both mobile devices from the Guest wifi network back to the main home network, each of them (phone and IPAD) can see the footage from one of the 2 cameras but not the other and it’s the same camera on both.
It can’t be an issue with the POE switch because earlier on I switched camera cables.
So I’m coming down to thinking that it’s one or a combination of; something the router is doing, a setting in the camera’s firmware, an issue with the IP address of the camera which is always visible.
 
Are you sure the cameras aren’t connected to Reolink externally and the app is using the internet connection to connect to them ? This is how they do remote access to the cameras.

Quick check would be go to mobile data, wouldn’t explain the intermittent access though.
 
Dangerous Dave said:
Are you sure the cameras aren’t connected to Reolink externally and the app is using the internet connection to connect to them ? This is how they do remote access to the cameras.

Quick check would be go to mobile data, wouldn’t explain the intermittent access though.
Click to expand...
Yes, I’m fairly sure this isn’t the case because if I remove the ethernet cable connecting LAN 4 on the router to the switch (therefore removing internet access for devices plugged into the switch), I can still plug my old laptop into the switch and see camera footage.
 
the-evaluator said:
No PM received.
Click to expand...
Thanks for the reminder.
Please don’t think I’m ignoring/forgotten to send a PM.
I spent time yesterday trying to determine why I couldn’t send a PM and even though I’ve been a member for over 10 years, my low post count means that the PM facility is not enabled. I’m trying to sort this with admins.

But back to the here and now - i’m sorry that you’ve had to chase me, especially when I’m the one asking for help.
To save me causing any more hassle or delays, here is what I have (third octet numbers changed but the principle is the same)

Home network; xxx.xxx.200.xxx
Guest network; xxx.xxx.201.xxx

Cameras are on .201 with sequential 4th octet numbers.

If I log on to Guest with either Ipad or Phone (.201), i can easily verify this through my Router’s admin screen and see the IP address allocated to either mobile device. I can also see both camera’s IPs and both are in the Guest range; .201.

At this point, i can see camera footage on both mobile devices. This is fine; what I would expect. Everything is on.201.xxx

But, If I then switch my mobile devices back to my home Network (IP range xxx.xxx.200.x), either device is still able to see camera footage on one, but not both cameras. At this point, my mobile devices are on a different network to the cameras and I have absolutely no idea why this is happening.

Whether relevant or not, I don’t know, but it is always the same camera that is visible in the above scenario.

So the camera IP address must be playing a part here somehow.

I’m currently thinking about changing one (or both) cameras to a static IP (within xxx.xxx.201.xxx) to see if that makes a difference.

All the ‘usual’ has already been done; router firmware updated, router re-booted, POE switch firmware updated and re-booted, both cameras firmware is up to date, but both re-booted.

Does any of this make any sense?

Thanks again
 
Assuming they're IP ranges you're using there's absolutely no need to obsfucate them. Quite the opposite really, I've been working on problems for people in the past where they've been replacing their IP range with something else for 'privacy' reasons but haven't been doing it consistently which meant I ended meaning I'd been sent on a bit of a wild goose chase ad which point I gave up. I'll happily say that my home IP range is 192.168.8.0/24 with my IoT VLAN being 192.168.80.0/24.

Anyway, you have given enough detail to believe that the guest network is indeed a separate network (or VLAN - virtual LAN as they're called) from your home network. Though, what's the subnet mask for a client on both networks? I'd assume it's 255.255.255.0 but need to know.

Let's assume that your home network is 192.168.200.0/24 with 192.168.201.0/24 being your guest network. In normal operation when you CAN'T access the cameras from the home network the cameras are 192.168.201.10 & 192.168.201.11 (it's much easier using actual IP addresses). What are their IP addresses when you CAN access them from the home network? Are they definitely still 192.168.201.10 & 192.168.201.11?

If they are, then it's highly likely that your router is to blame. The router is the device that manages access between the two networks so if traffic is getting through that shouldn't then it's either the router (I know you say you've updated firmware, but firmware updates don't necessarily fix 100% of issues) but it could also be that one or both of the cameras also have a connection to the home network, maybe via Wi-Fi.

Assuming the camera doesn't also have a Wi-Fi connection to the home network then it can't be camera firmware, at at least it can't be camera firmware alone. Even if the firmware were trying to do something along those lines the router should be stopping it happening.
 
the-evaluator said:
Assuming they're IP ranges you're using there's absolutely no need to obsfucate them. Quite the opposite really, I've been working on problems for people in the past where they've been replacing their IP range with something else for 'privacy' reasons but haven't been doing it consistently which meant I ended meaning I'd been sent on a bit of a wild goose chase ad which point I gave up. I'll happily say that my home IP range is 192.168.8.0/24 with my IoT VLAN being 192.168.80.0/24.

Anyway, you have given enough detail to believe that the guest network is indeed a separate network (or VLAN - virtual LAN as they're called) from your home network. Though, what's the subnet mask for a client on both networks? I'd assume it's 255.255.255.0 but need to know.

Let's assume that your home network is 192.168.200.0/24 with 192.168.201.0/24 being your guest network. In normal operation when you CAN'T access the cameras from the home network the cameras are 192.168.201.10 & 192.168.201.11 (it's much easier using actual IP addresses). What are their IP addresses when you CAN access them from the home network? Are they definitely still 192.168.201.10 & 192.168.201.11?

If they are, then it's highly likely that your router is to blame. The router is the device that manages access between the two networks so if traffic is getting through that shouldn't then it's either the router (I know you say you've updated firmware, but firmware updates don't necessarily fix 100% of issues) but it could also be that one or both of the cameras also have a connection to the home network, maybe via Wi-Fi.

Assuming the camera doesn't also have a Wi-Fi connection to the home network then it can't be camera firmware, at at least it can't be camera firmware alone. Even if the firmware were trying to do something along those lines the router should be stopping it happening.
Click to expand...
I really must apologise.
Through a combination of inexperience (and naivety) about matters network related, I thought I was being careful. Obviously, I;m probably doing more harm than good.
Sorry about this.
I’m away from my desk/router/switch at the moment, but will go and check the info in the next hour.
Thanks again
 
Last edited:
Have re-checked router;
Both Home and Guest networks use sub net mask 255.255.255.0

Currently, camera A is assigned xxx.xxx.201.2 (Guest network)
Camera B is assigned IP xxx.xxx.201.3 (on Guest)
I have just logged my Ipad onto Guest and it’s been allocated xxx.xxx.201.6
When I call up the Reolink IOS app, I can see camera footage.
All OK so far.
 
I’ve now switched my mobile device from the Guest network back to the home network.
On the router admin screen, I can see that (the IPad’s) IP has changed from xxx.xxx.201.6, back to xxx.xxx.200.20.
So the IPad is definitely not on the Guest network. It’s on home, according to the router.
The IP addresses of the 2 cameras remain unchanged; xxx.xxx.201.2 and 201.3. Both are still on Guest.
But when I call up the Reolink app from my Ipad now, I can still see camera xxx.xxx.201.2 but the Ipad will not connect to the camera which (has retained) it’s IP xxx.xxx.201.3
 
You must log in or register to reply here.
Back
Top Bottom