WiLife V2.1 manual Configuring Your Firewall, WiLife Networking Protocols

Ports Required

Configuring Your Firewall User Guide

Troubleshooting Note: XMPP also happens to be used in some Instant Messaging (IM) software such as Google Talk. If a firewall is trying to block all IM communication, it will likely also block remote viewing and control.

WiLife Networking Protocols

Description

UPnP Discovery

UPnP Control

Video Streaming

Camera Control

DHCP

WiLife Online

Relay Remote Viewing Direct Remote Viewing

Email Notifications

UDP: port 1900

TCP: ports 50000-65000

TCP: port 22211

TCP/UDP: ports 5800-5821

UDP: port 67inbound, port 68 outbound

TCP: ports 80, 443, 5222 (outbound)

TCP: port 80 (outbound)

TCP: ports 20570-20575 (inbound) (or other custom direct mode port) TCP: port 25 (outbound)

(or other custom SMTP port such as 465 for GMAIL)

Network

Camera

Camera

Camera

Camera

Camera

Internet

Internet

Internet

Internet

The Command Center’s ability to communicate with the Internet also effects the connection with remote viewing, in either direct mode or relay mode. With relay mode, the video is sent to WiLife servers from which the remote client receives the video. With direct mode, your computer is acting as a server that delivers live or recorded video remotely directly to the client.

Direct mode gives you the best remote viewing experience. However, a computer on the Internet must be able to directly connect with the computer running Command Center. If a UPnP-enabled router is detected, WiLife Command Center will attempt to use UPnP NAT to automatically map a port (between 20570 and 20575) from the router to your computer for direct remote viewing. If you do not have a UPnP-enabled router (or have UPnP control disabled for the router), you can still use direct remote viewing, but only if you manually configure your router.

If there are multiple routers, hardware firewalls and software firewalls in between the PC running WiLife Command Center and the Internet, then they all must be configured to allow the traffic needed for direct remote viewing. If your setup doesn't allow direct remote viewing, you will still be able to use relay remote viewing.

When viewing video remotely, your system at the remote location might also need to be configured to allow the remote video stream, especially if there is a hardware or software firewall in between the remote client and the Internet.

There are no inbound traffic requirements, but there are some outbound traffic requirements (usually most firewalls don't block outbound traffic). In addition, streaming video may also be blocked in some business settings. So check with your network administrator.

Remote Viewing Web Client to Internet

Description	Ports Required
Relay Mode Remote Viewing	TCP: 80, 443, 554, 1755 (outbound)
Direct Mode Remote Viewing	TCP: 80, 443, 20570-20575 (outbound)
	(or other custom direct mode port)

Network

Internet

Internet

By design, firewalls and Internet filters attempt to control communications on both the internal camera network and your Internet connection. This is not a problem if you configure them correctly. Remember, it is common to have more than one software firewall installed on a PC. A router also acts as a hardware firewall in between the PC and the Internet.

Note that the outbound requirements to the Internet would mean that any software firewalls would have to allow the traffic, as well as any and all hardware firewalls and routers on the way from the PC to the Internet. Outbound traffic to the Internet, in general, is usually not blocked, especially for home users. (In fact, most consumer routers don't let you configure outbound firewall rules other than filtering out specified IP addresses or ports). However, in a corporate or business environment, it is possible that outbound traffic is blocked except for specified ports.

110