Camera configured for local-only access inaccessible in the app when using VPN?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Camera configured for local-only access inaccessible in the app when using VPN?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Camera configured for local-only access inaccessible in the app when using VPN?
Camera configured for local-only access inaccessible in the app when using VPN?
2023-02-26 06:32:05
Model: Tapo C210  
Hardware Version: V1
Firmware Version: 1.3.0

I have a camera which was set up in the Tapo app, and then blocked from further internet access using the network's firewall. When a phone trying to access the app does so over the local WiFi, the app sees and talks to the camera without issue and behaves as expected. Once a VPN is used to access that same network (Wireguard VPN in this case), even while still on the same WiFi connection, the app can no longer communicate with the camera. 

 

Traffic to the camera is not being blocked by the network configuration, and this was verified by accessing the camera's ONVIF and RTSP streams, which still work as expected. Why does the app/camera connection fail over VPN? Please address this issue as many security conscious users are adopting similar setups.

  0      
  0      
#1
Options
5 Reply
Re:Camera configured for local-only access inaccessible in the app when using VPN?
2023-02-28 07:04:43 - last edited 2023-02-28 07:05:40

  Hello@ServError 

Thank you for reaching out to the community. 

 

Do you use VPN on the router or the mobile devices side,can you help descrive the network topology

e.g. ISP--Router Model XX (Wireguard VPN)<Wireless>Camera &  phone model xx OS xx

 

To check if the camera and phone are isolated or not, please try to ping camera when both devices are under the local network and share a ping result, thank you. 

  1. Check the delay between a camera and a phone on local network.

Please share a photo of camera status in the app too. 

  0  
  0  
#2
Options
Re:Camera configured for local-only access inaccessible in the app when using VPN?
2023-02-28 07:55:30 - last edited 2023-02-28 07:59:45

  @Solla-topee 

 

Solla-topee wrote

  Hello@ServError 

Thank you for reaching out to the community. 

 

Do you use VPN on the router or the mobile devices side,can you help descrive the network topology

e.g. ISP--Router Model XX (Wireguard VPN)<Wireless>Camera &  phone model xx OS xx

 

To check if the camera and phone are isolated or not, please try to ping camera when both devices are under the local network and share a ping result, thank you. 

  1. Check the delay between a camera and a phone on local network.

Please share a photo of camera status in the app too. 

 

The VPN is on the router and serves to access resources within the network while away, and it fulfills that purpose without issue for other services. The router is an OpenWRT device and the phones are android. The VPN is in the same firewall zone as the LAN.

 

I can successfully ping the camera from the phone with no packet loss while connected to the VPN. As I mentioned, I can use the camera's RTSP stream and ONVIF just fine, only the Tapo app connection seems to have issue.

 

I cannot run your delay test, as the device shows offline in the app while the phone is connected to the VPN, so I cannot access the settings menu shown. While not on the VPN, the RSSI shows as -47, not that it would be relevant to this issue given the other behaviors I've described.

  3  
  3  
#3
Options
Re:Camera configured for local-only access inaccessible in the app when using VPN?
2023-02-28 09:51:36

Hello  @ServError 

Thank you very much for more case details! May I verify did you do RTSP streaming on the phone via apps when router's VPN is ON?

I'd share the feedback with our engineers and see if have any explanation or suggestions.

 

 

  0  
  0  
#4
Options
Re:Camera configured for local-only access inaccessible in the app when using VPN?
2023-03-01 06:25:12 - last edited 2023-03-01 06:25:30

  @Solla-topee 

Solla-topee wrote

Hello  @ServError 

Thank you very much for more case details! May I verify did you do RTSP streaming on the phone via apps when router's VPN is ON?

I'd share the feedback with our engineers and see if have any explanation or suggestions.

 

 

Hello again.

 

Yes, that's correct. I use TinyCam PRO on android from the phones to access the RTSP streams.

 

Thank you.

  0  
  0  
#5
Options
Re:Camera configured for local-only access inaccessible in the app when using VPN?
2023-03-16 06:18:44
Is there any update to this?
  0  
  0  
#6
Options