IP Camera (RTSP + Web UI) 的端口转发
需要开放的端口
为什么需要端口转发？
Many homeowners want to view their CCTV feed from outside the LAN. The lazy way (forward 554/80) is also the riskiest — IP cameras are a top brute-force target. Prefer VPN or a managed cloud relay if the camera supports it.
按路由器品牌逐步操作
TP-Link
- Web UI → NAT Forwarding → Virtual Servers
- Forward external 554 → camera IP 554 (TCP)
- Forward external 443 → camera IP 443 (TCP)
- Strongly consider changing the external port (e.g. 65000 → 554 internal) to dodge script-kiddie scanners
Netgear
- routerlogin.net → Advanced → Port Forwarding → Add Custom Service
- TCP 554 → camera IP. TCP 443 → camera IP for web UI.
- Set a strong camera admin password BEFORE opening the port
Hikvision
- Camera → Configuration → Network → Basic Settings → set static IP
- Router → forward 8000 (Hikvision SDK) and 554 (RTSP) to camera IP
- Hik-Connect cloud usually works without forwarding — prefer it if possible
安全警告
Default-password Hikvision / Dahua / Reolink cameras facing the internet get pwned within hours. Never expose 80/554 without strong credentials, current firmware and ideally an IP allow-list. A VPN is dramatically safer.