Wireless Security. D-Link DCS-5605/5635

Section 4 - Security

Wireless Security

This section will show you the different levels of security you can use to protect your data from intruders.

The DCS-5635 offers the following types of security:

• WPA-PSK (Pre-Shared Key)

• WEP (Wired Equivalent Privacy)

What is WEP?

WEP stands for Wired Equivalent Privacy. It is based on the IEEE 802.11 standard and uses the RC4 encryption algorithm. WEP provides security by encrypting data over your wireless network so that it is protected as it is transmitted from one wireless device to another.

To gain access to a WEP network, you must know the key. The key is a string of characters that you create. When using WEP, you must determine the level of encryption. The type of encryption determines the key length. 128-bit encryption requires a longer key than 64-bit encryption. Keys are defined by entering in a string in HEX (hexadecimal - using characters 0-9, A-F) or ASCII (American Standard Code for Information Interchange – alphanumeric characters) format. ASCII format is provided so you can enter a string that is easier to remember. The ASCII string is converted to

HEX for use over the network. Four keys can be defined so that you can change keys easily.

D-Link DCS-5605/5635 User Manual 71


What is WPA?

WPA, or Wi-Fi Protected Access, is a Wi-Fi standard that was designed to improve the security features of WEP (Wired

Equivalent Privacy).

The 2 major improvements over WEP:

• Improved data encryption through the Temporal Key Integrity Protocol (TKIP). TKIP scrambles the keys using a hashing algorithm and, by adding an integrity-checking feature, ensures that the keys haven’t been tampered with. WPA2 is based on 802.11i and uses Advanced Encryption Standard instead of TKIP.

• User authentication, which is generally missing in WEP, through the extensible authentication protocol

(EAP). WEP regulates access to a wireless network based on a computer’s hardware-specific MAC address, which is relatively simple to be sniffed out and stolen. EAP is built on a more secure public-key encryption system to ensure that only authorized network users can access the network.

WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wireless connection. The key is an alpha-numeric password between 8 and 63 characters long. The password can include symbols (!?*&_) and spaces. This key must be the exact same key entered on your wireless router or access point.



Configuration and Use with a NAT Router

D-Link’s DCS-5605/5635 is a versatile and cost effective Internet Camera offering both video and audio monitoring.

It can also serve as a powerful surveillance system in security applications. The DCS-5605/5635 can be used with any wired or 802.11n/g wireless router. This section explains how to view the camera from either the Internet or from inside your internal network.

Materials Needed:

• 1 DCS-5605/5635 Internet Camera

• 1 Ethernet Cable

• A Wired or Wireless router such as the D-Link DIR-655 Wireless Router

• Ethernet based PC for system configuration

Setting up the DCS-5605/5635 for Use Behind a Router

Installing a DCS-5605/5635 Internet Camera on your network is an easy 4–step procedure:

1. Assign a Local IP Address to Your Internet Camera

2. View the Internet Camera Using Your Internet Explorer Web Browser

3. Access the Router with Your Web Browser

4. Open Virtual Server Ports to Enable Remote Image Viewing

This section is designed to walk you through the setup process for installing your camera behind a router and enable remote video viewing. For the basic setup of the DCS-5605/5635, follow the steps outlined in the Quick Installation

Guide.



After you have completed the setup of the DCS-5605/5635 outlined in the Quick Installation Guide you will have an operating camera that has an assigned IP Address. Because you are using a router to share the Internet with one or more PCs, the IP Address assigned to the Internet Camera will be a local IP Address. This allows viewing within your

Local Area Network (LAN) until the router is configured to allow remote viewing of the camera over the Internet.

1. Assign a Local IP Address to Your Camera

Run the setup wizard from the CD included with the DCS-5605/5635. Follow the steps in the Quick Installation Guide to configure the DCS-5605/5635. The camera will be assigned a local IP Address that allows it to be recognized by the router. Write down this IP Address for future reference.



2. View the Internet Camera Using Your Internet Explorer Web Browser

Run your Internet Explorer Web browser. In the address bar, type in the IP Address that was assigned to the Internet

Camera by the Setup Wizard SE program. The DCS-5605/5635 Live Video Page appears with a window displaying live video from the camera. You are able to view this screen from any PC running Internet Explorer on your LAN.

Click on the Setup button on the left side of the display. Scroll to the bottom of the Network Setup page (see page 45) to display the ports used by HTTP and Streaming audio and video.



The Setup > Network Setup page displays the port settings for your camera. If necessary, these ports can be changed if they are already in use by other devices (e.g. in a multiple camera environment).

Note: Both the HTTP port and RTSP port are required to be opened for the DCS-5605/5635. Please refer to page 77 on how to open ports in the router.



Router Set-Up and Installation

The following steps generally apply to any router that you have on your network. The D-Link DIR-655 is used as an example to clarify the configuration process. Configure the initial settings of the DIR-655 by following the steps outlined in the DIR-655 Quick Installation Guide.

3. Access the Router with Your Web Browser

If you have cable or DSL Internet service, you will most likely have a dynamically assigned WAN IP Address. ‘Dynamic’ means that your router’s WAN IP address can change from time to time depending on your ISP. A dynamic WAN IP Address identifies your router on the public network and allows it to access the Internet. To find out what your router’s

WAN IP Address is, go to the Status menu on your router and locate the

WAN information for your router (as shown on the next page). The WAN

IP Address will be listed. This will be the address that you will need to type in your Web browser to view your camera over the Internet.

Your WAN IP Address will be listed on the router’s Status > Device

Info page.



Note: Because a dynamic WAN IP can change from time to time depending on your ISP, you may want to obtain a

Static IP address from your ISP. A Static IP address is a fixed IP address that will not change over time and will be more convenient for you to use to access your camera from a remote location. The Static IP Address will also allow you to access your camera attached to your router over the Internet.

4. Open Virtual Server Ports to Enable Remote Image Viewing

The firewall security features built into the DIR-655 router prevent users from accessing the video from the DCS-

5605/5635 over the Internet. The router connects to the Internet over a series of numbered ports. The ports normally used by the DCS-5605/5635 are blocked from access over the Internet. Therefore, these ports need to be made accessible over the Internet. This is accomplished using the Virtual Server function on the DIR-655 router. The Virtual

Server ports used by the camera must be opened through the router for remote access to your camera. Virtual Server is accessed by clicking on the Advanced tab of the router screen.

Follow these steps to configure your router’s Virtual Server settings:

1. Click Enabled .

2. Enter a different name for each entry.

3. Enter your camera’s local IP Address (e.g., 192.168.0.120) in the Private IP field.

4. Select TCP for HTTP port, both (TCP and UDP) for RTSP and both (TCP and UDP) for 5556 - 5559 ports.

5. If you are using the default camera port settings, enter 80 into the Public and Private Port section, click

Apply .

6. Scheduling should be set to Always so that the camera images can be accessed at any time.



Repeat the above steps adding the port 554 to both the Public and Private Port sections. A check mark appearing before the entry name will indicate that the ports are enabled.

Important: Some ISPs block access to port 80 and other commonly used Internet ports to conserve bandwidth. Check with your ISP so that you can open the appropriate ports accordingly. If your ISP does not pass traffic on port 80, you will need to change the port the camera uses from 80 to something else, such as 800. Not all routers are the same, so refer to your user manual for specific instructions on how to open ports.

Enter valid ports in the Virtual Server section of your router. Please make sure to check the box next to the camera name on the Virtual Server List to enable your settings.



Using & Configuring 3G Compatible Cell Phones

To enable mobile device video streaming, you will need to configure profile 4 for mobile viewing (see below).



Play from RealPlayer

The following steps are based on a Nokia 6630 cell phone.

Press the Menu button and select Media

Select Open

Select RealPlayer



Select Open

When RealPlayer opens, press Options



Select Download

Select Video Clips

Note: 71.34.50.5 is the camera’s IP address in this sample.

Press Options



Select Navigation Options

Select go to web address

Input your rtsp address



Press Yes , and allow Connection and

Loading of the streaming video.

Enjoy streaming video on your cellphone.



Play from PVPlayer

Press the Menu button and select PVPlayer

Select Open

Press the Options button



Select Open location

Input your rtsp address

Note: 71.34.50.5 is the camera’s IP address in this sample.



Enjoy streaming video on your cellphone.


Wireless Security. D-Link DCS-5605/5635

Wireless Security

What is WEP?

What is WPA?

Configuration and Use with a NAT Router

Router Set-Up and Installation

Using & Configuring 3G Compatible Cell Phones

Play from RealPlayer

Play from PVPlayer

Related manuals

Table of contents

Wireless Security. D-Link DCS-5605/5635