need help with Firewall rules for ring doorbell.

[LouieLouie]

Hello,

I have a Ring doorbell on an untrusted subnet.  I'm trying to allow our cellphones (on a trusted subnet) to have permission to view Live Video from the Ring doorbell.  No matter what combination I try, it doesn't work.  I'm suspicious that the untrusted subnet, hosted on an older router, is the problem.  But just in case:

Does anybody have a working configuration which has the Ring on one subnet, and the clients (cellphones) on another?

Alternatively, any advice appreciated.

Thanks!

[bartjsmit]

Run a packet trace on the traffic and see what is being denied or causes an error. Typically there is a protocol in play that has trouble being routed. Interfaces, Diagnostics, Packet Capture.

Wireshark is a powerful tool for your analysis and can read the OPNsense capture file. It may be worth setting up a bridge between the two subnets and do a capture of the traffic when the video streaming works for comparison.

Bart...

[hernandoimpressed]

Have you found a good firewall for your doorbell? I have a wireless security system from https://www.vivint.com/packages/security-cameras, and even though they have good protection for the devices, I want to install another firewall additional. I know that nowadays, it is possible to hack practically everything, and better protect yourself twice and be sure that none can hack your home's security system. I had seen a lot of news about hackers hacking security cameras to track when the owners were not at home and robbing them.

[Taunt9930]

All activity with Ring is via the Ring servers, including live view. Your untrusted subnet needs access to the internet, and your phone subnet needs access to the internet. That is all - there is no direct communication across your network whatsoever.

I assume your Ring subnet has internet access, or is that the issue? Subnet is irrelevant - it is internet access that's important here.