Camera Network Requirements and Firewall Configuration

For using Tellucare Camera Supervision, the Axis camera need to be connected to reliable networks which allow for traffic to the Axis backend, the Morphean backend and the Tellcuare backend. The following article will cover what needs to be done.

Camera network requirements

The requirements in terms of bandwidth are not very high by today's standards. A bandwidth of 1 Mb/s should be sufficient for reliable video streaming.

However, since camera supervision is a low latency real-time service, it has strong requirements in terms of network reliability: packet loss or high packet latency can significantly affect the ability to stream video from the camera to the client.

While bandwidth can quite easily be measured, network quality in terms of latency and packet loss is much harder to reliably assess and can greatly vary over time. If there are repeated issues with a specific camera or installation (failing to start video streams, high video stream latency, etc) the quality of the network is the root cause in most cases. Router or installation should be moved to a different location or an alternative network should be used.

Camera network firewall requirements

The Camera needs to be allowed outbound traffic to:

  • AXIS Camera Management Platform for camera on-boarding, firmware updates, and some remote management operations.
  • 8Morphean Video Management System for camera configuration and video streaming.
  • Tellu Tellucare Backend for monitoring and camera generated events and alarms.

There is no requirement for opening any inbound traffic.

Axis Camera Management Platform

From To Service Port Action
Camera dispatcher.sts.axis.com HTTP 80 Allow
Camera dispatchse1-st.axis.com HTTP 80 Allow
Camera dispatchse2-st.axis.com HTTP 80 Allow
Camera dispatchsus1-st.axis.com HTTP 80 Allow
Camera dispatchjp1-st.axis.com HTTP 80 Allow
Camera dispatcher.sts.axis.com HTTP 443 Allow
Camera dispatchse1-st.axis.com HTTP 443 Allow
Camera dispatchse2-st.axis.com HTTP 443 Allow
Camera dispatchsus1-st.axis.com HTTP 443 Allow
Camera dispatchjp1-st.axis.com HTTP 443 Allow

Morphean Video Management System

From

To

Service 

Port 

Action

Camera

13.39.113.80 - 13.39.113.88

HTTPS

443

Allow

Camera

13.39.113.80 - 13.39.113.88

TCP

8080-8180

Allow

Camera

3.76.129.169 - 3.76.129.171

HTTPS

443

Allow

Camera

3.76.129.169 - 3.76.129.171 

RTMPS

1936

Allow

Camera

3.76.129.169 - 3.76.129.171 

TCP

8080

Allow

 

Tellu TelluCare Backend

To From Service Port Action
Camera *.tellucloud.com HTTPS 443 Allow
Camera *.tellucare.no HTTPS 443 Allow

 

After configuration the following steps should be performed:

  1. Confirm that Tellu gets a heart beat from the camera (the last seen field in the camera list)
  2. Confirm that you can access the video stream (by clicking the play button in the camera list)
  3. Confirm that you can access the camera configuration (by clicking the configuration button in the camera list)

Skjermbilde 2024-01-29 kl. 12.28.39 

If all three are working as expected, then the firewall on the camera network is configured correctly.

Troubleshooting

If one or more of the steps above is not working as expected you need to double check the configuration. 

If 1. is failing
Most likely the Tellu Tellucare Backend is not reachable from the camera.

If 2. or 3. are failing

Morphean Video Management System is probably not reacheable. If the camera does not onboard correctly or does not work after a factory reset, the issue is most likely with the AXIS Camera Management Platform.

There is no specific network configuration on the camera itself or firewall on the Tellu side. If the testing above fails, try connecting the camera to any network which allow outbound traffic (for example a 4G router) to confirm that the issue is with the network and firewall. Cameras are configured to accept DHCP from any network and should work as long as they can reach the services listed above.