Preparation
The device has 3 physical network interfaces:
- Ethernet WAN (port 1 - left)
- Ethernet LAN (port 2 - right)
- WiFi LAN
Important
The WAN port must be connected to the internal network where you have access to the cameras and the Internet.
LAN will only be used for device configuration.
Step 1 - Setup Firewall and Port Forwarding MANGO device
Initial Setup
Connect to computer via LAN 192.168.8.1.
If the device is new, it will initially require configuration and prompt you to assign a root password. Once the initial configuration is complete, you can proceed with setting up the VPN and portforwarding:
Setup VPN
- Go to VPN > OpenVPN Client
- Normally there is only NordVPN as a provider, do a new provider “Add Manually“ (it may already exist).
- Go to New Provider and upload the .ovpn configuration file
- Apply config
- Connect to the VPN
Setup Port Forwarding
- go to NETWORK > Firewall > Port Forwards
- Create port forwarding to connect via the web from the VPN (192.168.8.1 probably won't appear in the list and will have to be entered manually)
The external zone must be ovpnclient. This will allow the VSaaS technical department to remotely manage the device.
- Create port forwarding to connect to the camera/etc. (in this case, we're forwarding 192.168.8.20:22). On-site forwarding to the camera will likely be done via the WAN zone, using the IP corresponding to the connected interface and port 80.
Step 2 - Find cameras
SSH port
Install nmap
Extras
Testing port forwarding on LAN and WAN. In this photo, ports 65001 and 65004 are working.
