Remote Desktop (RDP) service is enabled by default under the BVRAdmin account (account with administrative rights).
🛈 Note: The option to make settings for Network Address Translation (NAT) in the Configuration Wizard (BVMS mode) was removed with version 11.0. It is however still possible to connect to the DIP from a remote PC, using either Operator Client or Video Security Client.
The way to connect remotely to a DIP, is to use an SSH tunnel. It required specific settings on the DIP as well as on the network’s router. For a full step-by-step explanation on how to make this setup, check the DIP’s User Manual, chapter Remote connection to the system (page 16).
SSH Tunneling BVMS provides remote connectivity utilizing Secure Shell (SSH) tunneling. SSH tunneling constructs an encrypted tunnel established by an SSH protocol/socket connection. This encrypted tunnel can provide transport to both encrypted and unencrypted traffic. The Bosch SSH implementation also utilizes Omni-Path protocol, which is a high-performance low latency communications protocol developed by Intel.
Technical aspects and restrictions
– SSH tunneling utilizes port 5322. This port cannot be modified.
– The SSH Service must be installed on the same server as the BVMS Management Server.
– (Enterprise) user accounts must have a configured password. (Enterprise) user accounts without a password cannot log on utilizing a SSH connection.
– Local storage cameras do not support SSH connection.
– Configuration Client cannot connect remotely via SSH. Configuration Client connection must be done via port mapping.
– Operator Client checks connection with SSH service every 15 seconds. If the connection is interrupted, Operator Client retests the connection every minute.
Port mapping
Configure one port forwarding for the BVMS Management Server to utilize port 5322 for both internal and external connections.
This is the only port mapping entry that you need to make for the entire system. BVMS port mapping is not required. Encrypted communication After the connection is established via a SSH tunnel, all communications between the BVMS Management Server and a remote client are encrypted.
