RLC-842A FTP-Configuration and Fritzbox 7590

[user_709123426357433_709123426357433]

Hello, I've tested different variants, but I always get "454: Connection failed. Please check your network connection."
Can someone give me an example?

[joseph_1979]

@user_709123426357433_709123426357433 Are you using FTP or FTPS? Install Cerberus ftp server on your PC and try to ftp files to your PC. This shall confirm that from camera point of view, the ftp is working correctly.

If you are technical, then capture a trace between the camera and the Fritzbox. Then use wireshark to identify the issue.

And make sure you have the latest firmware version. Go to Reolink download center and check it out.

[user_709123426357433_709123426357433]

@joseph_1979 The firmware was up to date.
I installed Wireshark, but I can't find anything about the IP addresses of the FTP server and the camera.
I had previously installed an older camera from Reolink and FTP didn't work either. There are no problems with the other cameras (Hikvision).
Does nobody have FTP for Reolink active yet and can give me the configuration as an example?

[joseph_1979]

@user_709123426357433_709123426357433 It is very easy to set up and I have it on a number of cameras. On the ftp server (you may install FileZilla or cerberus ftp server fir testing) you need to create a user and grant permissions. You need to enable FTP and FTPS. Then install Filezilla client on the same PC and try to transfer a file to the ftp server using ftp and ftps. If all is OK then configure the ftp on the camera. Ensure there is no firewall rules between the camera and the ftp server.

Follow this link https://support.reolink.com/hc/en-us/articles/360003493434-How-to-Set-up-FTP-via-Reolink-App/#:~:text=Server%20Address%3A%20Type%20in%20the,required%2C%20please%20enable%20Anonymous%20FTP.

UPDATE 1: According to its specs, this cam supports only FTP. FTPS is not supported.

UPDATE 2: This is a new firmware. So now they added FTPS.

[user_709123426357433_709123426357433]

@joseph_1979 I thought I found the bug (port release for port 21 on the FTP server was missing).
Unfortunately the error is still there.
I upload 2 pictures (camera and Fritzbox as FTP server)
Fritzbox is also the Routr. There is a USB stick on which the camera images are saved. The USB stick is released.

[user_709123426357433_709123426357433]

@user_709123426357433_709123426357433 there is no access to the FTP server. If I enter a wrong username, then the same error comes up.

[joseph_1979]

@user_709123426357433_709123426357433 Now install Coreftp/Filezilla client on your PC and with the same credentials try to upload a file to the Fritzbox. Capture a trace using Wireshark. Configuration seems fine.

Refer to this to capture trace https://www.edpnet.be/en/support/troubleshooting/telephony/troubleshoot-fritzbox/how-to-make-a-wireshark-sample-on-a-fritzbox.html

And what do you see in the logs under system in Fritzbox?

[user_709123426357433_709123426357433]

@joseph_1979 I installed coreftp and filezilla. Unfortunately, I am not familiar with that. I have attached a picture. Before I do anything with Wireshark, I'll probably have to change some settings.

[joseph_1979]

@user_709123426357433_709123426357433 It seems that you have logged onto the Fritzbox using secure FTP (TLS). Can you use FTP and upload a file from your PC to the Fritzbox? When on Fritzbox go under system and click on log............ Do you see any errors? Can you show me the log part when you transfer the file?

It could be that the camera is using FTPS despite you are enabling FTP. But we see this from the logs on the Fritzbox.

And on the camera set the transport mode to PASV for FTP.

And under remote directory in camera ftp config, add the / at the end............Kameras/

[joseph_1979]

@user_709123426357433_709123426357433 No need to install both coreftp and FileZilla.......one client is enough. If coreftp go to site manager and add a site....enter host IP of the Fritzbix and the credential to log on the folder assigned to the camera. And select FTP. Then connect. and then from the left window which is the PC select a file and upload to Fritzbox. You can repeat this using FTPS instead to FTP to check whether Fritzbox supports FTPS. There might be some issues with CIPHER method....we will see from the logs.

If you are not familiar with the protocol forget Wireshark. Don't expose your credentials and IP :). And don't bother about the private IPs 192.168.X.X. Nobody would ever get access to your devices unless he/she is on your private network.

[user_709123426357433_709123426357433]

@joseph_1979 I've already tested FTPS, PASV and /cameras/ with no success.

[user_709123426357433_709123426357433]

@user_709123426357433_709123426357433 I tried again with PASV, but no success.

[joseph_1979]

@user_709123426357433_709123426357433  Coreftp used FTP while FileZilla SFTP. You needed to put port=21. Anyhow can you try from the camera and show me the logs from the Fritzbox. See if you see the camera trying to establish the ftp session. If you see TLS and CIPHER then camera is using FTPS. Maybe cipher method is not supported. A trace at Fritzbox will show us what is really happening. I did a quick search and saw customers who have successfully ftped files from Reolink to Fritzbix using FTP (not FTPS).

I think that the firmware of the camera only allows FTPS................ enable it and use port 990............ allow this port on Fritzport.

[joseph_1979]

@joseph_1979 I came home and had 5 minutes to spare............and I did check the FTPS. I did manage to generate your error by changing the port to 990 for FTPS. Then I use the port 21 for FTPS and the session was established. I did this to get the TLS version and the cipher method used by the camera. So ensure that the Fridzbox accept TLSv1.2 (which I think it does) and the cipher method ECDHE. I did a trace at the server side.

[user_709123426357433_709123426357433]

@joseph_Thank you for your trouble.
I released ports 20, 21 and 990 on the Fritzbox. I tested it repeatedly with FTPS and port 21. The Fritzbox accepts TLSv1.2 and since 2016 also ECDHE. On the Fritzbox page, it was not previously possible to see that the camera had attempted to log in. I've also tried using the wrong username on the camera to see if it provokes an appropriate error. The same error message always comes up. Also in detailed LOGs on the Fritzbox I find no reference. As they suggested I tried again using port 21 and FTPS. The error still comes.

[joseph_1979]

@user_709123426357433_709123426357433 This means that it is not reaching the router when using FTP. A pcap trace will tell. Do you have a setting like upgrade from ftp to tls similar to what is available on Cerberus ftp server?

Another test. Install cerberus ftp server (home version) and check both ftp and ftps from camera. You shall see all activities in logging.

[user_709123426357433_709123426357433]

@joseph_1979 I hope it was right. I set the PC as an FTP server for the camera.

[user_709123426357433_709123426357433]

@joseph_1979 it worked with the PC as an FTP server. The images are saved on the PC. If I define the FTP server again on the Fritzbox, the error comes again.

[user_709123426357433_709123426357433]

@joseph_1979 I looked through everything again on the Fritzbox, but found nothing. My guess is that the problem is with the specification in the "Remote Directory" field and therefore no target is found.

[joseph_1979]

@user_709123426357433_709123426357433 Just put \ in the remote directory. Use FTP only. Can you capture a pcap trace at Fritzbox?

With Wireshark you can see what is really happening if the logs of the Fritzbox are insufficient. This is a wonderful tool which I used it a lot apart from other expensive probes to delve into complex protocols within mega networks. But if you are not an engineer in this sector you might be scared :).

Note that despite we set FTP on the camera, the camera sends a request to upgrade the FTP session to TLS and if this is allowed by the FTP server (in Cerberus there is a flag to enable this) then the camera will change to TLSv1.2. If the ftp server restricts this then the camera continues using native FTP. Maybe this is causing an issue on the Fritzbox. Only the pcap can reveal this.

use wireshark filter:  ftp-data or ftp

[user_709123426357433_709123426357433]

@joseph_1979 I have lost hope that there is a solution. The RLC-842A was supposed to replace my RLC-422. The old camera also had an FTP problem. In addition, there is no new firmware for this camera (Flash Player is still used). I tested the old camera again today. The test transmission is still ok., but images are still not transmitted. That was always via email. There seems to be a fundamental problem with the Reolink cameras (for me).

[joseph_1979]

@user_709123426357433_709123426357433 So the last hope is to email reolink support l. Maybe they can modify the firmware for you to have native ftp. In my opinion if you selected ftp the camera should not ask for tls. I use cerberus and have no issue.

[user_709123426357433_709123426357433]

@joseph_1979 Although it was ultimately unsuccessful, I would like to thank you for your effort.

[joseph_1979]

@user_709123426357433_709123426357433 No problem at all. But as I told you a pcap trace shall reveal the problem but you will be exposing yourself if you attach it here. I still suggest you to email support. Maybe they came across it and have the firmware.

And I hope you learnt something too.