UP  |  HOME

Security Cameras

Table of Contents

Hardware

Cameras

  • Amcrest IP5M-B1276EB-AI
  • Anpviz IPC-D3083WD-S
  • Panoeagle PG-YC2285I-ISU-28
  • Panoob PD94BA3-3M
  • Real HD IPC-Y4TR28A-C
  • Dafang DF3
  • Wyze C2

Network

  • hAP mini
  • mAP lite (future)

Machines

Software

hAP Mini config

This is on Router OS 6.4.10 so some things will change if you go to 7.x

The main things:

  • Configure the AP with hidden SSID, setup a WPA2 key
  • Bridge all the interfaces
  • Remove any references to WAN
  • Add the old WAN interface as a LAN list member
  • Set an IP address on the bride interface, 10.20.0.1
  • Make a DHCP pool 10.20.0.100-10.20.0.199
  • Make a DHCP server on the bridge interface for 10.20.0.0
  • Add wireless client MAC addresses to the wireless access-list
  • Make sure wireless interface has "Default Authenticate" unchecked

The config looks like: 

# nov/22/2023 09:11:08 by RouterOS 6.49.10
# software id = ---------
#
# model = RB931-2nD
# serial number = ------------
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country="united states" default-authentication=no \
    disabled=no hide-ssid=yes installation=indoor mode=ap-bridge ssid=teller wireless-protocol=802.11 \
    wps-mode=disabled
/interface list
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=teller \
    wpa2-pre-shared-key="password"
/ip pool
add name=dhcp_pool1 ranges=10.20.0.100-10.20.0.199
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge1 name=dhcp1
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=wlan1yma42p_c2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add interface=ether1 list=LAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=wlan1 list=LAN
/interface wireless access-list
add interface=wlan1 mac-address=FA:KE:MA:CA:DD:RS
add interface=wlan1 mac-address=FA:KE:MA:CA:DR:ES
add interface=wlan1 mac-address=FA:KE:MA:CA:DR:SS
add authentication=no forwarding=no interface=wlan1
/ip address
add address=10.20.0.1/24 interface=bridge1 network=10.20.0.0
/ip dhcp-server network
add address=10.20.0.0/24 dns-none=yes gateway=10.20.0.1 netmask=24
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface-list=!LAN
/ip upnp interfaces
add interface=bridge1 type=internal
/system identity
set name=teller
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

Home Assistant

Frigate NVR

Cameras

Each camera gets a main stream for recording, and a second substream to be used by frigate for detection.

General setup looks like:

  • Set a static IP address
  • Configure main and substream as below
  • Disable or configure lights
  • Disable audio stream if desired
  • Turn off unnecessary services (Onvif, Hik, Control protocols)
  • Disable Event/AI features (Motion detection, Alarms, AI recognition)
  • Change admin password, add frigate user with password
  • Configure NTP

Amcrest IP5M-B1276EB-AI

  • RTSP URL: rtsp://[username]:password@IPaddress:554/cam/realmonitor?channel​=1&subtype​=0

Accessing Amcrest Products Using RTSP. This reference has the main and substream numbers reversed.

For some reason Sub Stream 1 has limited resolutions so I disable it, and just use Sub Stream 2.

  • Main Stream Settings

    URL: rtsp://[username]:password@10.20.0.10:554/cam/realmonitor?channel​=1&subtype​=0

    Encode Mode
    H.264
    Smart Codec
    OFF
    Resolution
    2880x1620
    Frame Rate
    20
    Bit Rate Type
    CBR
    Bit Rate
    8192
    Frame Interval
    40
  • Sub Stream Settings

    URL: rtsp://[username]:password@10.20.0.10:554/cam/realmonitor?channel​=1&subtype​=02 Sub Stream 2

    Encode Mode
    H.264
    Resolution
    1280x720
    Frame Rate
    5
    Bit Rate Type
    CBR
    Bit Rate
    1024
    Frame Interval
    5

Anpviz IPC-D3083WD-S

  • RTSP URL: rtsp://[username]:password@IPaddress:554/Streaming/channels/101
  • Main Stream Settings

    URL: rtsp://[username]:password@IPaddress:554/Streaming/channels/101

    Video Type
    Video & Audio
    Resolution
    3200x1800
    Bitrate Type
    Variable
    Video Quality
    Highest
    Frame Rate
    20
    Max Bitrate
    16384
    Video Encoding
    H.264
    H.264+
    OFF
    Profile
    High Profile
    I Frame Interval
    40
    SVC
    OFF
    Smoothing
    50
  • Sub Stream Settings

    URL: rtsp://[username]:password@IPaddress:554/Streaming/channels/102

    Video Type
    Video & Audio
    Resolution
    1280x720
    Bitrate Type
    Variable
    Video Quality
    Medium
    Frame Rate
    6
    Max Bitrate
    1024
    Video Encoding
    H.264
    Profile
    Main Profile
    I Frame Interval
    6
    Smoothing
    50

Panoeagle PG-YC2285I-ISU-28 (Front Patio)

TODO

  • RTSP URL: rtsp://[username]:password@IPaddress:554

TODO

  • Main Stream Settings

    TODO

  • Sub Stream Settings

    TODO

Panoob PD94BA3-3M (Garage)

TODO

  • RTSP URL: rtsp://[username]:password@IPaddress:554

TODO

  • Main Stream Settings

    TODO

  • Sub Stream Settings

    TODO

Real HD IPC-Y4TR28A-C

TODO

  • RTSP URL: rtsp://[username]:password@IPaddress:554

TODO

  • Main Stream Settings

    TODO

  • Sub Stream Settings

    TODO

Dafang Hacks

TODO I already have dafang hacks installed to microSD cards on my 3 cameras.

They need to be configured for use with frigate.

I want static IPs, and this comment suggests swapping around some pre-made config files then modify to suit. There's also this reference on the wiki.

General Camera Settings Checklist

  • Enable NTP (point to 10.20.0.2)
  • Enable DST, and manually configure start/end dates
  • Set the camera name
  • Put the date overlay in the upper right
  • Put the camera name overlay in the bottom right
  • Set admin password, add frigate user with password
  • Disable white lights