Firewall and router compatibility issues involve multiple layers of network communication. Below is a systematic troubleshooting and resolution guide.

I. Detailed Troubleshooting Steps

1. Basic Network Connectivity Check (Physical and Network Layer)

As the first step in troubleshooting, confirm the validity of the underlying network connection.

1.1 Physical Cables and Power Check

• Wired connection: Ensure RJ45 connectors are properly plugged in and check the port indicator lights (usually solid green/blinking orange). Use a cable tester to verify continuity or replace with a verified spare cable.
• Power supply: Ensure the camera is powered correctly. For PoE devices, check the PoE port indicator and power allocation on the switch/injector.
• Wireless signal: For Wi-Fi cameras, temporarily place them within 1 meter of the router to test connectivity, ruling out wall obstruction or electromagnetic interference.

1.2 IP Address and Connectivity Test

• IP identification: Obtain the camera's current IP address via the router's DHCP client list or in the CYVIO APP (Camera Settings → About Device).
• Ping test: Run the command ping [Camera IP] -t in a terminal for continuous connectivity monitoring. Packet loss exceeding 5% indicates potential cable or device issues. Timeout responses may be caused by IP conflicts, subnet mask errors, or blocking by intermediate devices.

2. Firewall Configuration Check

If the network layer is reachable but services are unavailable, check firewall rules at various levels.

• Device-level firewall: Some cameras have built-in access control lists; verify whether IP filtering is enabled.
• Client firewall: On Windows, navigate to Control Panel → System and Security → Windows Defender Firewall → Allow an app through firewall to create inbound rules for camera services or ports (80/443/554, etc.).

3. Router and Switch Configuration Check

3.1 Wireless Router Settings

• Frequency band: Devices that only support 2.4GHz should have "dual-band SSID merge" disabled, and a separate 2.4GHz SSID configured (use alphanumeric characters, avoid special symbols).
• Wireless encryption: Use WPA2-PSK/AES, which offers the best compatibility and security. Avoid outdated WEP or non-standard mixed modes.
• Access control: Check the router's MAC filter, AP isolation, and parental control rules to ensure the camera MAC is not blocked.

3.2 Advanced Switch Configuration

• VLAN isolation: For Layer 3 switches, ensure routing exists between the camera VLAN and client VLAN, or configure cross-VLAN access policies.
• Address binding: If IP-MAC binding is enabled, register the camera's physical address in the switch management interface.

4. Port and Protocol Compatibility Verification

Network cameras provide services via specific ports. Blocked ports or protocol mismatches are common compatibility obstacles.

4.1 Standard Port Mapping

• HTTP: 80 (Web management)
• HTTPS: 443 (Encrypted management)
• RTSP: 554 (Live streaming)

Port testing: Use telnet [Camera IP] 80 on a PC to check port availability. A black screen or blinking cursor indicates success; failure indicates the port is blocked.

II. Preventive Measures for Compatibility Issues

1. Optimization During Planning

• IP address planning: Assign static IPs to cameras or enable IP-MAC binding on the router to prevent connectivity loss due to IP changes.
• Port planning: If possible, pre-open the required ports on the firewall for cameras.

2. Device Selection and Deployment Standards

• Router selection: Choose stable, well-performing routers. Avoid outdated or low-performance models supporting multiple cameras.
• Wireless deployment: Minimize walls between cameras and the router. Fix router channels to reduce interference.

3. Maintenance and Updates

• Firmware updates: Regularly check and update camera and router firmware to fix known compatibility issues and improve stability.
• Device replacement: When replacing routers, keep the SSID, encryption type, and password consistent to allow automatic camera reconnection. If network parameters change, reconfigure via the device management app or by using the physical reset button.