I purchased two of these cameras with solar panels. I saw a review tonight saying they do not support reolink NVRs or other software like Blue Iris. This is NOT listed anywhere on the site and is a game changer. IE I will be sending both back. Can someone please advise if theirs work? Thanks.

@user_612681119584296_612681119584296

I think I might have gotten to the bottom of the 56v PSU too. I think someone might have picked up the 12v one and then inadvertently returned the 56v one. Cant say that for sure though but having that there to begin with could explain some configuration issues I had getting to the NVR via the network. I will probably configure the thing tonight if I get some spare time. We will see.

@user_612681119584296_612681119584296

I am still looking into this. I brought up the NVR on about 300 inch screen today and showed some folks the basic workings of an NVR. I looked at a few settings and I think I can fix the problem with my NVR taking over the cameras and not being able to access them from other NVRs. That being said I think I need to add each camera a static IP not only in the GUI for each camera but in the DHCP server. Shouldnt be like that but again you shouldnt be able to plug up one thing and take over everything with a certain name brand. As far as the power supply I dont know it is a POE power supply that I would like to explain by someone picking one up and bringing the wrong one back but I have the propper 12v one plugged in now. We will see.

@ks so I found out some more stuff. Apparently, yes the NVR will basically do a man in the middle attack if you connect it to a network using DHCP. Even though the lease has not expired and the NVR is not the DHCP server. I can plan for that and that is basically a preventable thing. The safest thing would be to set up the network only to allow certain macs. Yes you can get around that but whatever.

I have basically had the NVR sitting until I could figure this stuff out. I have to give a class tomorrow on very basic video recovery from DVRs and NVRs. I hooked up my unconfigured RLN36 thinking it would be perfect since the last few DVR/NVRs I have seen have been reolink. I get a flicker of the power LEDs and nothing on the display. Recently, I had someone bring in a HD connected to a big box unit that would not spin up. In that case they had an improper 19v PSU plugged into a 12v system. I checked the PSU that came with mine and it was a 56V power supply. Hooked a 12v one in and everything booted up fine. So good on Reolink for have voltage protection. The only thing I can think was they sent the 56v PSU with the NVRs not realizing they are not POE.

So, I am going to give a really good class tomorrow about what to expect to find and not find with NVR/DVR setups.

@joseph-chircop_497308027822318

It should not be able to take over the cameras. Reolink support has responded to my above thread.

Will manually sitting the IP address on the camera fix this problem? Because if the device has an address from DHCP it should not change unless the DHCP server that sat it changes it. This is essentially imitating a man in the middle attack but the cameras are designed to let it happen. I just want an option to cut it off. The chances of a person exploiting this is low IE if they gain physical access to an ethernet cable they could just feed it 96v DC and probably force shut down most POE switches. But I really would like to eliminate it.

As I explained in this thread that is now being ignored...

https://community.reolink.com/topic/4446/rln36-kills-all-my-camers-major-security-flaw-found?post_id=18907&_=1673150083648

I purchased a new NVR system. All of my cameras were on a dedicated VLAN and have specific IP addresses plugged in. I purchased the NVR as a backup and hopefully a replacement for my power hungry Blueiris NVR. I powered the thing on and connected it to my dedicated VLAN. One by one every recent REOLINK branded camera went dark despite the device not having a user name and password for any of them. All of them had a static DHCP address assigned but yet this off the shelf NVR hijacked all of them and took them offline.

I get that it makes the system easier to configure cameras for new people to but there has to be an option to turn this feature off. It has to use a workaround to take over the cameras. I keep replying to the original thread and I have stopped getting responses. If I can hook up a $200 NVR to a system with cameras having passwords and they simply roll over and change their IPs then it is very easy to conclude people can exploit this issue.

If you arnt going to fix it at least explain which port I need to block to prevent someone from sending a command and completely circumventing my configuration.

@user_612681119584296_612681119584296

Still going on another month and no reply. No acknowledgement of the security flaw. An off the shelf NVR was connected to the same VLAN as my REOLINK cameras and took every single one of them offline and assigned them new IP addresses.

This was despite the fact they already had assigned IP addresses on the network.

This is a classic man in the middle attack. All new REOLINK cameras are susceptible to this.

I guess we are not going to get an answer to the issue about the security flaw in your cams?

@bitteroldmann_504481637408946

Two things I have noticed. 1) The newer cameras do not seem to attract spiders like my older ones for some reason. The RL823 I have will also burn the hell out of you with the IR. I found this out the hard way and I suspect the bugs dont like it. 2) I also have automated lights around my home. I have all 60watt equivalent LEDs in the exterior fixtures that are connected to dimming. When an exterior door is opened they go to full brightness for five minutes and then back to 10% after. I also had some invidible fences setup but I hadnt quite figured out the keyframes withing with Blue Iris and homeseer so they are turned off. By having external visible LED bulbs on my house I feel it deters people from walking up and hanging out. The spiders also tend to like those better. I just have to powerwash the house every year.

@sasuke This is what I did.

I am even considering doing this inside my garage.