---
title: Configuring School Camera NVR Access in SecureSchool (DHCP Reservation + Firewall Table + MAC Address Best Practices)
description: "## 📹 Overview When installing or replacing a school camera system (such as Provision, Reolink, or similar IP-based systems), it is important to properly configure the NVR (Network Video Recorder) in SecureSchool. If an NVR is left on a dynamic…"
url: "https://www.k12usa.com/docs/configuring-school-camera-nvr-access-in-secureschool-dhcp-reservation-firewall-table-mac-address-best-practices/"
updated: "2026-02-21"
category: SecureSchool
tags:
  - SecureSchool
---

# Configuring School Camera NVR Access in SecureSchool (DHCP Reservation + Firewall Table + MAC Address Best Practices)

## 📹 Overview

When installing or replacing a school camera system (such as Provision, Reolink, or similar IP-based systems),
 it is important to properly configure the NVR (Network Video Recorder) in SecureSchool.

If an NVR is left on a dynamic DHCP address, its IP can change. When that happens:

- Port forwarding may stop working
- Remote access may fail
- Firewall rules may no longer match
- Troubleshooting becomes difficult

**Best practice is to:**

- ✔ Create a DHCP Reservation for the NVR
- ✔ Identify and document the NVR’s MAC Address
- ✔ Add the NVR to the **InternalServers** firewall table
- ✔ Verify protocol / NAT rules

This ensures long-term stability and makes future support calls much easier.

---

## 🔎 Why the MAC Address Matters

The MAC address (Media Access Control address) is the hardware identifier of the device.

Unlike an IP address, a MAC address:

- Does **NOT** change
- Uniquely identifies the device
- Helps support quickly locate the device in ARP scans and logs
- Is critical when creating DHCP reservations

When troubleshooting by phone, SecureSchool support can often locate a device faster using its MAC address
 rather than relying only on an IP address.

> **Recommendation:** Always document the MAC address when installing or replacing an NVR.

---

## 🖥️ Step 1 – Identify the NVR (IP + MAC Address)

If you do not know the NVR’s IP address:

### ✅ Option A – ARP Scan (Recommended)

1. Log into SecureSchool.
2. Go to **Tools & Tests → Tools → ARP Scan**.
3. Select the **Inside Interface**.
4. Click **Go**.
5. Identify the device by vendor name, known IP range, and MAC address.

You will see:

- IP Address
- MAC Address
- Vendor

### 📌 Option B – ARP Status Table

1. Go to **Tools & Tests → Status → ARP**.
2. Review the IP-to-MAC mappings.
3. Identify the device vendor.

> **Tip:** If unsure, temporarily unplug the NVR and refresh the ARP table to confirm which IP/MAC disappears.
>
>
>
> **Note:** Only the NVR (not each individual camera) typically requires firewall/NAT access.

---

## 📋 Step 2 – Verify DHCP Lease (Optional but Helpful)

1. Go to **Setup → DHCP Services → DHCP Leases**.
2. Locate the NVR.
3. Confirm the current IP, MAC address, and hostname (if present).

This confirms you are reserving the correct device.

---

## 🧩 Step 3 – Create a DHCP Reservation

1. Go to **Setup → DHCP Services**.
2. Click the **Reservations** tab.
3. Click **Add a new Reservation** (LAN Scope).
4. Enter:
   - Reservation Name (example: `Main_Building_NVR`)
   - IP Address (current NVR IP)
   - MAC Address (copy exactly from ARP table)
5. Save.

> **Important:** The MAC address must match exactly. Even one incorrect character will prevent the reservation from working.

---

## 🔐 Step 4 – Add the NVR to the InternalServers Firewall Table

1. Go to **Firewall → Firewall Tables**.
2. Click **Manage Table Entries**.
3. Select the **InternalServers** table.
4. Click **Add a new Entry**.
5. Add the NVR IP address (example: `192.168.x.x/32`).
6. Save.

This allows the NVR to be treated as an internal server for rule processing.

---

## 🌐 Step 5 – Verify Protocol / NAT Rules

1. Go to **Firewall → Protocol Rules**.
2. Confirm the **InternalServers** rule is active.
3. Ensure appropriate NAT / Port Forwarding rules exist (if remote access is required).

**Only required ports should be opened.**

For additional troubleshooting, you may also review:

- Firewall Logs (Logs & Reports → Firewall Logs)
- Connection Monitoring (if enabled)
- Packet Capture (advanced troubleshooting)

---

## ⚠️ Important Best Practices

- Do NOT create broad rules for entire camera subnets.
- Do NOT rely on temporary Proxy Exceptions.
- Always reserve IP addresses for servers, NVRs, door access systems, or similar infrastructure devices.
- Always document the MAC address for future support calls.

---

## 💡 Why This Matters

- Camera systems randomly “stopping”
- Remote viewing failures
- Firewall rule mismatches
- Support calls that take longer than necessary

A properly reserved NVR with a documented MAC address avoids future troubleshooting headaches.

---

## 🤝 Need Help?

Our SecureSchool Support Team is happy to assist with reviewing camera configurations,
 DHCP reservations, or firewall setup.

📞 **877-225-0100**
 📧 [support@k12usa.com](mailto:support@k12usa.com)

*Technical assistance is free and unlimited with your active SecureSchool subscription.*