ahojte, su 4 rano a mam pocit, ze som uvaril karfiol v hlave.

- mam doma mikrotik hAP ac, na ktorom bezi DHCP server, ktory rozhadzuje IP v rozsahu 192.168.88.0/24 (sam ma 192.168.88.1)
- tiez mam na neho cez wifi pripojenu ip cameru D-Link DSC-935L, ktoru bolo treba rozchodit cez mydlink.com, ma staticku IP 192.168.88.245 a ma nakonfigurovane porty 81 (web), 554 (rtsp) a 443 (ved viete co)
- na routeri bezi firewall ofc.
- ja sa pripajam do siete apple macbookom cez wifi (takze vsetci sme vlastne na jednej vnutornej sieti).
- mam verejnu IP, funkcne preroutovanu z routera od providera do svojho routera.

*problem je, ze kamera mi pri nalogovani do jej administracie (192.168.88.245:81) nechce spustit ani obraz, ani zvuk (ani H.264 a ani MJPEG), inak sa da vsetko nastavovat.
*dalsi problem je, ze mobilna aplikacia mydlink beziaca na ios zariadeni (cez tu som tu kameru rozbehaval) tiez nezobrazuje ziaden obraz ani zvuk (hlasi problem so sietou).
*posledny problem je, ze web mydlink.com po nalogovani cez browser rovnako nezobrani ani obraz ani zvuk.

logicky zaver teda je, ze mam nieco dosahane vo vnutornej sieti, konkretne firewall filtre a NAT nastavenia + sipim nejaky low skill a hairpin nat issue:

firewall filtre:
[admin@MikroTik] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough

1 ;;; defconf: fasttrack
chain=forward action=fasttrack-connection connection-state=established,related

2 ;;; defconf: accept established,related
chain=forward action=accept connection-state=established,related

3 chain=forward action=accept src-address=192.168.88.0/24 log=no

4 ;;; defconf: drop invalid
chain=forward action=drop connection-state=invalid

5 ;;; defconf: drop all from WAN not DSTNATed
chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface=ether1

6 chain=input action=accept protocol=icmp

7 chain=input action=accept connection-state=established

8 chain=input action=accept connection-state=related

9 chain=input action=drop in-interface=pppoe-out1

NAT:
[admin@MikroTik] /ip firewall nat> print all
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; defconf: masquerade
chain=srcnat action=masquerade out-interface=pppoe-out1

1 ;;; Hairpin NAT
chain=srcnat action=masquerade src-address=192.168.88.0/24 dst-address=!192.168.88.1 log=no

... tu su nejake redirecty z verejnej IP na konkretne vnutorne IPcky, ktore nechcem zverejnovat.

4 chain=dstnat action=dst-nat to-addresses=192.168.88.245 to-ports=81 protocol=tcp dst-address=!192.168.88.1 dst-address-type=local dst-port=81 log=no

5 chain=dstnat action=dst-nat to-addresses=192.168.88.245 to-ports=554 protocol=tcp dst-address=!192.168.88.1 dst-address-type=local dst-port=554 log=no

6 chain=dstnat action=dst-nat to-addresses=192.168.88.245 to-ports=5556-5559 protocol=tcp dst-address=!192.168.88.1 dst-address-type=local dst-port=5556-5559 log=no

7 chain=dstnat action=dst-nat to-addresses=192.168.88.245 to-ports=443 protocol=tcp dst-address=!192.168.88.1 dst-address-type=local dst-port=443 log=no

8 chain=dstnat action=dst-nat to-addresses=192.168.88.245 to-ports=0-65535 protocol=udp dst-address=!192.168.88.1 dst-address-type=local log=no


Fakt netusim, co robim zle, viem, ze IP camera potrebuje mat okrem webu otvoreny aj rtsp port.
Ono prvotnym cielom je dostat obraz v administracii kamery (192.168.88.245:81), potom korektny obraz cez web mydlink.com a v ios aplikacii mydlink Home a konecnym cielom je prepojit ju s NASkom. Zatial vsak neviem rozbehat tu kameru ani len v zaklade...

akakolvek rada pomoze, mozno to fakt robim cele zle.
vdaka.

edit: este detail - ano, nemam tam ziaden port forward (tykajuci sa kamery) smerom do internetu, k tomu som sa este ani neodhodlal, kedze to neviem rozbehat ani na LANke. Akonahle to bude na LANke fungovat, nemam problem to forwardnut, mozno aj toto jadro problemu. uPNP som nepouzil a rad by som ho nepouzil, idem primarne po manualnom rieseni.