Ruijie Community

Title: RTSP Camera Access Through WireGuard VPN - Port Forwarding Not Working with EG105G-P-V3 Setup [Print this page]

Author: Michel Mascaren Time: 2025-6-29 10:21
Title: RTSP Camera Access Through WireGuard VPN - Port Forwarding Not Working with EG105G-P-V3 Setup
Hi guys, hope someone can help!!

I'm implementing an image analysis system that needs to access IP cameras via RTSP protocol from multiple remote locations. I'm facing connectivity issues due to CGNAT limitations and would appreciate your guidance.

Current Setup
Headquarter (HQ): 1x EG105G-P-V3 router with public IP addresses (port 4000 and 5000)
Remote Sites: 2x EG105G-P-V3 routers (Site 1 and Site 2)
Each site: 1 IP camera accessible locally via RTSP

ISP Issue: Both remote sites are behind CGNAT, preventing traditional port forwarding

Network Configuration
HQ Network: 10.10.0.0/24
- EG105G-P-V3 HQ: 10.10.0.1
- Camera access needed from external system

Site 1 Network: 10.10.1.0/24
- EG105G-P-V3: 10.10.1.1
- Camera: 10.10.1.2:4000

Site 2 Network: 10.10.2.0/24
- EG105G-P-V3: 10.10.2.1
- Camera: 10.10.2.2:5000

What I've Implemented
WireGuard VPN tunnels between HQ and both remote sites.

Port forwarding rules on HQ router:
External port 4000 → Site 1 camera (10.10.1.2:4000)
External port 5000 → Site 2 camera (10.10.2.2:5000)

VPN connectivity is working (can ping between networks)

The Problem
Despite the VPN tunnels being active and port forwarding configured on the HQ router, the external image analysis system cannot access the cameras remotely12. The RTSP streams should be accessible via:
rtsp://HQ_PUBLIC_IP:4000/streaming/channels/101 (Site 1 camera)
rtsp://HQ_PUBLIC_IP:5000/streaming/channels/101 (Site 2 camera)

Questions
1. Does the EG105G-P-V3 support RTSP traffic forwarding through WireGuard tunnels?
2. Are there specific routing configurations needed for RTSP protocol over VPN?
3. Are there any firewall rules or DPI settings that might be blocking RTSP traffic?

Alternative Considered
I should also mention that before implementing the WireGuard solution, I attempted to configure an automatic IPsec VPN between the EG105G-P-V3 routers. However, this approach failed due to a problem on opening ports 500 and 4500.

Any guidance on proper configuration or alternative approaches would be greatly appreciated. The goal is to enable reliable remote RTSP access to cameras located behind CGNAT connections.

Thanks in advance!!

Router Model: EG105G-P-V3
Protocol: RTSP (Real-Time Streaming Protocol)
VPN Type: WireGuard
ISP Limitation: CGNAT (Carrier-Grade NAT)
Required Access: External system → HQ Public IP → VPN tunnel → Remote cameras

Author: guominxiang@rui Time: 2025-6-29 12:50
Hi.
I need to double check with the R&D team. It may take some time to double check with our R&D team. I will reply to the result here and inform you by email. Please pay attention.

Best regards,
Micca

Author: Michel Mascaren Time: 2025-6-30 00:16

GTAC-Micca replied at 2025-6-29 12:50
Hi.
I need to double check with the R&D team. It may take some time to double check with our R&D tea ...

Great! Ler me know if you need me to share the projects with your team. Thanks in advance!!

Author: v-shaojinren@ru Time: 2025-6-30 10:25

Michel Mascarenhas replied at 2025-6-30 00:16
Great! Ler me know if you need me to share the projects with your team. Thanks in advance!!

Dear customer,
To determine the the cause of this issue, we will need to check the project test the reachability of the VPN connection. Therefore, to share the project safely, we encourage you to contact us on Rita(www.ruijienetworks.com/rita), our real-time support platform. Our dedicated engineers are readily available to resolve your issues promptly.
You can click "Live Chat" on the top right corner of the page to contact our engineer.

Welcome to Ruijie Community (https://community.ruijienetworks.com/)