Duet Web control over the internet? Webcam guide?
-
My Duet controlled printer is at work.
I can access the duet web control while I am there locally, but can I access it over the internet when I am at home?
Also: is there a guide for setting up a webcam to monitor the printing process? I see other posts but not a start-from-scratch-step-by-step guide. It would be great to make sure I don't come to work and see spaghetti! -
As to accessing a computer at work from home:
Technically it is usually not difficult but would you be allowed to?
Frederick
-
@fcwilt
Yes, all is cleared for remote control and monitoring. -
@pyper said in Duet Web control over the internet? Webcam guide?:
@fcwilt
Yes, all is cleared for remote control and monitoring.Well then all that needs to be done is to have your tech people setup port forwarding and whatever login security they wish to enable.
Frederick
-
@fcwilt
Would it be easier to just have a dedicated local computer running DWC, then log into that computer with remote desktop?Is this the best guide for setting up a webcam in DWC?
https://seemecnc.dozuki.com/Guide/How+to+Set+Up+a+WebCam+for+Duet+Web+Interface/137 -
@pyper said in Duet Web control over the internet? Webcam guide?:
@fcwilt
Would it be easier to just have a dedicated local computer running DWC, then log into that computer with remote desktop?Is this the best guide for setting up a webcam in DWC?
https://seemecnc.dozuki.com/Guide/How+to+Set+Up+a+WebCam+for+Duet+Web+Interface/137Remote desktop could work but it would be exposing more hardware to the outside world as opposed to just opening a dedicated browser connection to DWC running on some computer.
As to cameras I just run a Axis PTZ camera for monitor my printers - it has nothing to do with the camera support provided in the DWC.
-
I think it largely depends on what your internal IT security requirements are.
As @fcwilt suggests - port forwarding is a good approach and in this case (just port forwarding to DWC on your Duet) is pretty safe even if someone guesses the external port.
Another approach would be to have a dedicated machine and provide VPN access to that machine - arguably more secure than port forwarding but, in general, more work to set up.
Or use some remote access software like RemotePC.
Options, options
-
@stuartofmt said in Duet Web control over the internet? Webcam guide?:
As @fcwilt suggests - port forwarding is a good approach and in this case (just port forwarding to DWC on your Duet) is pretty safe even if someone guesses the external port.
On my router the option exists to setup user accounts.
Then any attempt to connect to a internal device from outside results in a login screen being displayed.
When this is done just knowing which port to access is not enough.
-
@stuartofmt Don't rely on port obscurity to keep anything out. I can show you my firewall logs where port scanning bots are hunting down any open port and trying to exploit them continually or at least until they get banned and move to another IP. Doesn't matter how you try and hide them if the ports are open you'll have bot trying to hack whatever next stage security you have in place within hours if not minutes.
Only way I'd do this safely/reliably is set up a VPN between the remote and local sites. Ideally one-to-one from my remote computer. But a host key based approach from a "road warrior" remote computer would be okay.
Lot of pretty good instruction on how to set this up for Windows/Mac/Linux out there you will need access to (or have access to the person that can set it up) your offices' firewall/router equipment to set it up.
@Pyper do a google on something like "how to set up a remote office vpn" and have fun.
-
@nurgelrot said in Duet Web control over the internet? Webcam guide?:
Don't rely on port obscurity to keep anything out.
True enough - but in the limited case of an external port being forwarded to port 80 on the Duet controller the risk may be judged (by the OPs IT folks) to be "reasonably contained" in the sense that what is available to be exploited is basically the Duet API's.
For sure not bullet proof and agree VPN is a better option. It just depends on what's at risk and how risk averse one is.
