Difference between revisions of "Base Station Connectivity Information"

From Idrive
Jump to navigation Jump to search
Line 16: Line 16:
 
* One NIC is for internet connectivity either via your LAN or dedicated Internet connection. This is required for communication with the Idrive Global Center.
 
* One NIC is for internet connectivity either via your LAN or dedicated Internet connection. This is required for communication with the Idrive Global Center.
 
** The Idrive Base Station utilizes a proprietary software called Idrive Control Center
 
** The Idrive Base Station utilizes a proprietary software called Idrive Control Center
−
** The Control Center uses port 3306 for MySQL on the Internet NIC and connects to the idrive Global Center (cloud) are every 3 minutes with an alive signal.
+
** The Control Center uses port 3306 for MySQL on the Internet NIC and connects to the idrive Global Center (cloud) every 3 minutes with an alive signal.
−
** Every 6 hours the Sync service runs to upload to the idrive Global Center (this allows you to view events from location(s) at [http://globalcenter.idrive.pro/ http://globalcenter.idrive.pro]) This transfer requires FTP port 21 to be open using passive mode and random ports from 30,000-35,000 (up to 4 at a time) to transfer the video and data events.
+
** Every 6 hours the Sync service runs to upload to the Idrive Global Center (this allows you to view events from your location(s) at [http://globalcenter.idrive.pro/ http://globalcenter.idrive.pro]) This transfer requires FTP port 21 to be open using passive mode and random ports from 30,000-35,000 (up to 4 at a time) to transfer the video and data events.
  
  
Line 24: Line 24:
 
**The Wireless Access Point typical settings are IP Address 192.168.0.1, Network Mask of 255.255.'''0'''.0, Default Gateway 192.168.0.1, DNS 192.168.0.1, No DHCP.
 
**The Wireless Access Point typical settings are IP Address 192.168.0.1, Network Mask of 255.255.'''0'''.0, Default Gateway 192.168.0.1, DNS 192.168.0.1, No DHCP.
 
**The '''REQUIRED''' Wireless setting for the access point are: Hidden SSID of bwifi, 802.11G mode only, No Encryption.
 
**The '''REQUIRED''' Wireless setting for the access point are: Hidden SSID of bwifi, 802.11G mode only, No Encryption.
−
**Were an unauthorized client to connect to the Access point the AP only forwards packets to itself and offers no services (DNS or DHCP)
+
 
−
** The access Point has a gateway address of only itself (192.168.0.1) so it does not have internet access or access to other networks
 
−
** No DNS is provided by the Access Point, communications from the Cameras via WiFi is only to the Base Station software
 
−
** NO DHCP is provided from the Access Point, the specified scope above is all that is permitted through to the Control Center software
 
  
  
Line 35: Line 32:
 
**The base station compares the camera's serial number to the database to ensure this particular camera is authorized to connect.
 
**The base station compares the camera's serial number to the database to ensure this particular camera is authorized to connect.
 
**The Idrive Wifi Service only accepts connections from our product having the hard coded port of 4660 all other ports are rejected(to any other device this is a dead end)
 
**The Idrive Wifi Service only accepts connections from our product having the hard coded port of 4660 all other ports are rejected(to any other device this is a dead end)
−
 
−
* We use a Omni-directional outdoor rated Access Point
 
−
** Optional equipment is available for quoting to provide a directional Access Point further limiting areas available to WiFi device access
 
−
**# This might be a solution when many client WiFi networks are competing for the same air space and channels, maintaining integrity of all networks
 
−
**# Some of our clients install their Access Point inside a garage facility, once again limiting outdoor WiFi access and controlling the environment
 
−
 
−
* Additionally we utilize a software by the name of Team Viewer to remotely connect and administer the system (they can be found at <nowiki>teamviewer.com</nowiki>)
 
−
** We use this to perform manual Updates to the idrive Software
 
−
** Client training and troubleshooting
 
−
 
  
  
−
Finally if you choose, you may provide a separate internet Connection outside of your LAN so the idrive Base Station will perform its functions autonomously from your corporate LAN and internet connectivity.
+
* Wi-Fi Network Security Overview (Should an unauthorized client attempt to connect to the Access Point)
 +
** The SSID is not broadcast so it is less obvious to try to connect to.
 +
** The Access Point has a gateway address of only itself so it does not forward on packets that are not directed to 192.168.0.10
 +
** No DNS service is provided by the Access Point
 +
** NO DHCP service is provided from the Access Point so a client would need to set a static address on their system.
 +
** The Idrive Wi-Fi service only allows port 4660 to communicate through the Wireless NIC connection (they would need to use this port which would do them no good)
 +
** Were they to get past all of that the netwrok cards are not bridged to there is no  path to the system or other network.

Revision as of 19:28, 12 October 2012

Idrive Base Station Connection and Security information

Security, Connectivity and open 802.11/G only WiFi access to the Idrive Access Point and Base Station software:


  • The Idrive Base Station utilizes dual Ethernet NICs (Network Interface Card)
    • Both networks are treated as "Public" networks using Windows 7 and file sharing is turned off. Some of our clients open the sharing on the LAN NIC to perform Active Directory (Log-in AD user and password) to perform Back-Ups and storage
    • The dual NICs are not bridged and maintain NO connectivity between each other.


  • One NIC is for internet connectivity either via your LAN or dedicated Internet connection. This is required for communication with the Idrive Global Center.
    • The Idrive Base Station utilizes a proprietary software called Idrive Control Center
    • The Control Center uses port 3306 for MySQL on the Internet NIC and connects to the idrive Global Center (cloud) every 3 minutes with an alive signal.
    • Every 6 hours the Sync service runs to upload to the Idrive Global Center (this allows you to view events from your location(s) at http://globalcenter.idrive.pro) This transfer requires FTP port 21 to be open using passive mode and random ports from 30,000-35,000 (up to 4 at a time) to transfer the video and data events.


  • The second NIC supports the idrive wireless network which consists of one or more Wireless Access points for communication with the cameras.
    • The REQUIRED settings the second NIC are: IP Address 192.168.0.10, Network Mask of 255.255.0.0, No Default Gateway, No DNS, No DHCP.
    • The Wireless Access Point typical settings are IP Address 192.168.0.1, Network Mask of 255.255.0.0, Default Gateway 192.168.0.1, DNS 192.168.0.1, No DHCP.
    • The REQUIRED Wireless setting for the access point are: Hidden SSID of bwifi, 802.11G mode only, No Encryption.


  • Each Idrive X1 camera has a static IP Address assigned at the factory and no two are the same.
    • When the vehicle's ignition is turned off the camera searches for the bwifi wireless network.
    • Upon finding the bwifi wireless network the camera reaches out to the Idrive Base Station at 192.168.0.10 using port 4660
    • The base station compares the camera's serial number to the database to ensure this particular camera is authorized to connect.
    • The Idrive Wifi Service only accepts connections from our product having the hard coded port of 4660 all other ports are rejected(to any other device this is a dead end)


  • Wi-Fi Network Security Overview (Should an unauthorized client attempt to connect to the Access Point)
    • The SSID is not broadcast so it is less obvious to try to connect to.
    • The Access Point has a gateway address of only itself so it does not forward on packets that are not directed to 192.168.0.10
    • No DNS service is provided by the Access Point
    • NO DHCP service is provided from the Access Point so a client would need to set a static address on their system.
    • The Idrive Wi-Fi service only allows port 4660 to communicate through the Wireless NIC connection (they would need to use this port which would do them no good)
    • Were they to get past all of that the netwrok cards are not bridged to there is no path to the system or other network.
Retrieved from "https://admincenter.idriveglobal.com/wiki/index.php?title=Base_Station_Connectivity_Information&oldid=587"