WAN (Internet) Access Configuration Guide
1. Overview of Remote Access Methods
There are two common methods to access Hikvision devices over the Internet (WAN):
- Router Port Forwarding (Recommended)
- IP Server (Private Domain Resolution)
2. Method 1: Router Port Forwarding (Recommended)
2.1 Device Network Configuration
Configure the network settings on the DVR/NVR:
- IP Address (e.g., 192.168.1.100)
- Subnet Mask (e.g., 255.255.255.0)
- Gateway (e.g., 192.168.1.1)
π This should match the local network configuration of your router.
2.2 Router Port Forwarding Setup
Log in to your router and go to:
Forwarding Rules β Virtual Server
Configure port mapping as follows:
| Port Type | Default Port | Description |
| Service Port | 8000 | Client access (iVMS software) |
| HTTP Port | 80 | Web browser access |
| RTSP Port | 554 | Video streaming (optional) |
Example configuration:
- Internal IP: 192.168.1.100
- External Port: 8000
- Protocol: TCP or ALL
- Status: Enabled
2.3 DDNS (Dynamic Domain Name) Setup
Since public IP addresses may change, it is recommended to configure DDNS.
Common DDNS providers:
- NO-IP
- DynDNS
- PeanutShell (Oray)
Configure DDNS in your router:
DDNS β Enter domain account information
2.4 Add Device in Client Software
In iVMS-4200 or similar software:
- Registration Mode: Domain Mode
- Address: Your DDNS domain (e.g., xxx.ddns.net)
- Port: 8000
- Username/Password: Device login credentials
3. Method 2: IP Server (Private Domain Resolution)
π Suitable for projects with a public server
3.1 Deploy IP Server
Run the IP Server software on a server with a public IP address.
3.2 Device Configuration
On the DVR/NVR:
- Set the DNS server address to the IP Server’s IP
3.3 Add Device in Client
- Registration Mode: Private Domain Mode
- Enter:
- Server address
- Device serial number
- Username and password
4. Client Configuration (iVMS-4200)
Before preview or configuration, devices must be added.
Steps:
- Open client software
- Go to Device Management
- Right-click and add a root node
- Add device under the node
Choose registration mode based on scenario:
| Scenario | Mode |
| Local network access | IP Mode |
| Port forwarding / DDNS | Domain Mode |
| IP Server | Private Domain Mode |
5. Web Browser Access (IE Only – Legacy)
To access via browser:
http://Public_IP:Port
or
http://Domain:Port
Example:
http://123.123.123.123:80
5.1 Common Issues & Solutions
Issue 1: No response after login
Cause: ActiveX plugin not installed
Solution:
- Go to Internet Options β Security β Custom Level
- Enable all ActiveX-related options
Issue 2: Page error / plugin corrupted
Delete the following files:
Path:
C:\Windows\Downloaded Program Files
Delete: HCNETActive Control
C:\Windows\System32
Delete:
– HCNETVideoActiveX.ocx
– HCNETSDK.dll
– playm4.dll
6. Media Server (Advanced Usage)
Used for:
- Multiple users
- Reducing bandwidth load
Setup Steps:
- Run media server software on a PC
- Configure port and connection parameters
- Add media server in client software
- Start live view
π If forwarding data appears on the server, setup is successful.
β οΈ Note: Media server works only with client software, not with browser access.
7. Important Notes
7.1 ISP Restrictions
Many ISPs (especially residential networks):
- Do NOT provide public IP addresses
- Block ports such as 80 / 8000
Solutions:
- Use a 4G/5G router
- Request a public IP from ISP
- Use Hik-Connect (recommended)
7.2 Recommended Modern Solution
π Use Hik-Connect (P2P)
Advantages:
- No port forwarding required
- No public IP needed
- Easy setup
- Supports mobile and PC
8. Practical Recommendations
For real-world projects:
- Small projects β Use Hik-Connect
- Medium projects β Port forwarding + DDNS
- Large projects β Media server solution