📹 Overview #

When installing or replacing a school camera system (such as Provision, Reolink, or similar IP-based systems),
it is important to properly configure the NVR (Network Video Recorder) in SecureSchool.

If an NVR is left on a dynamic DHCP address, its IP can change. When that happens:

• Port forwarding may stop working
• Remote access may fail
• Firewall rules may no longer match
• Troubleshooting becomes difficult

Best practice is to:

• ✔ Create a DHCP Reservation for the NVR
• ✔ Identify and document the NVR’s MAC Address
• ✔ Add the NVR to the InternalServers firewall table
• ✔ Verify protocol / NAT rules

This ensures long-term stability and makes future support calls much easier.

🔎 Why the MAC Address Matters #

The MAC address (Media Access Control address) is the hardware identifier of the device.

Unlike an IP address, a MAC address:

• Does NOT change
• Uniquely identifies the device
• Helps support quickly locate the device in ARP scans and logs
• Is critical when creating DHCP reservations

When troubleshooting by phone, SecureSchool support can often locate a device faster using its MAC address
rather than relying only on an IP address.

Recommendation: Always document the MAC address when installing or replacing an NVR.

🖥️ Step 1 – Identify the NVR (IP + MAC Address) #

If you do not know the NVR’s IP address:

✅ Option A – ARP Scan (Recommended) #

1. Log into SecureSchool.
2. Go to Tools & Tests → Tools → ARP Scan.
3. Select the Inside Interface.
4. Click Go.
5. Identify the device by vendor name, known IP range, and MAC address.

You will see:

• IP Address
• MAC Address
• Vendor

📌 Option B – ARP Status Table #

1. Go to Tools & Tests → Status → ARP.
2. Review the IP-to-MAC mappings.
3. Identify the device vendor.

Tip: If unsure, temporarily unplug the NVR and refresh the ARP table to confirm which IP/MAC disappears.

Note: Only the NVR (not each individual camera) typically requires firewall/NAT access.

📋 Step 2 – Verify DHCP Lease (Optional but Helpful) #

1. Go to Setup → DHCP Services → DHCP Leases.
2. Locate the NVR.
3. Confirm the current IP, MAC address, and hostname (if present).

This confirms you are reserving the correct device.

🧩 Step 3 – Create a DHCP Reservation #

1. Go to Setup → DHCP Services.
2. Click the Reservations tab.
3. Click Add a new Reservation (LAN Scope).
4. Enter:
   • Reservation Name (example: Main_Building_NVR)
   • IP Address (current NVR IP)
   • MAC Address (copy exactly from ARP table)
5. Save.

Important: The MAC address must match exactly. Even one incorrect character will prevent the reservation from working.

🔐 Step 4 – Add the NVR to the InternalServers Firewall Table #

1. Go to Firewall → Firewall Tables.
2. Click Manage Table Entries.
3. Select the InternalServers table.
4. Click Add a new Entry.
5. Add the NVR IP address (example: 192.168.x.x/32).
6. Save.

This allows the NVR to be treated as an internal server for rule processing.

🌐 Step 5 – Verify Protocol / NAT Rules #

1. Go to Firewall → Protocol Rules.
2. Confirm the InternalServers rule is active.
3. Ensure appropriate NAT / Port Forwarding rules exist (if remote access is required).

Only required ports should be opened.

For additional troubleshooting, you may also review:

• Firewall Logs (Logs & Reports → Firewall Logs)
• Connection Monitoring (if enabled)
• Packet Capture (advanced troubleshooting)

⚠️ Important Best Practices #

• Do NOT create broad rules for entire camera subnets.
• Do NOT rely on temporary Proxy Exceptions.
• Always reserve IP addresses for servers, NVRs, door access systems, or similar infrastructure devices.
• Always document the MAC address for future support calls.

💡 Why This Matters #

• Camera systems randomly “stopping”
• Remote viewing failures
• Firewall rule mismatches
• Support calls that take longer than necessary

A properly reserved NVR with a documented MAC address avoids future troubleshooting headaches.

🤝 Need Help? #

Our SecureSchool Support Team is happy to assist with reviewing camera configurations,
DHCP reservations, or firewall setup.

📞 877-225-0100
📧 support@k12usa.com

Technical assistance is free and unlimited with your active SecureSchool subscription.