Remote Access
Intelbras DDNS Remote Access Setup
Configure Intelbras DDNS for remote access to DVRs, NVRs, cameras, and routers — with port forwarding, security tips, and CGNAT caveats.
Summary Intelbras DDNS is a free dynamic-DNS service that lets you reach DVRs, NVRs, cameras, and routers remotely through a friendly hostname like
meustore.intelbras.com.br, even when your ISP rotates your public IP. This guide covers account creation, on-device DDNS configuration, port forwarding on the upstream router, security hardening, and the CGNAT caveat that breaks DDNS entirely on many modern connections.
How does Intelbras DDNS enable remote access?
Intelbras DDNS is a free dynamic DNS service that maps a friendly hostname (like meustore.intelbras.com.br) to your connection’s current public IP and keeps it updated automatically. Instead of memorizing a number that the ISP can change at any time, you type the hostname in the browser or app and always reach the right address. DDNS does not by itself open ports or bypass NAT — it just keeps the address current. The port forwarding still has to be configured on the upstream router, and the device still has to be reachable over the public internet.
The single biggest caveat: DDNS does not solve CGNAT. If your ISP places customers behind Carrier-Grade NAT and you no longer have a real public IPv4 on the WAN, opening ports on the customer router and registering a DDNS hostname will not make the device reachable from outside. You’ll need a tunnel-based approach instead.
DDNS vs. Remotizze: when to use each
Intelbras also offers Remotizze, a cloud service that gives plug-and-play access to compatible devices without manual port forwarding or DDNS. DDNS is the right choice when you need direct access to the device’s IP (for a custom NVR, third-party VMS, or integration software), want to use the device’s native web interface, or already have port forwarding in place and only need a stable hostname instead of a changing IP. For broader context on the alternative path, see our companion guide on Intelbras Remotizze access and the iOLT Cloud management guide.
Requirements
Before configuring DDNS, you need:
- An active internet connection at the site where the Intelbras device is installed.
- A public IPv4 on the customer’s WAN, or an upstream router that can forward ports. CGNAT breaks the whole approach.
- Local access to the Intelbras device (DVR, NVR, IP camera, or router) — via browser, Intelbras software, or local console.
- A free Intelbras DDNS account from the Intelbras DDNS portal.
Common factory defaults for Intelbras gear:
| Device | Default IP | User | Password |
|---|---|---|---|
| DVR / NVR | 192.168.1.108 | admin | admin |
| IP camera | 192.168.1.108 | admin | admin |
| Intelbras router | 10.0.0.1 or 192.168.0.1 | admin | admin |
Change the default password right after DDNS setup is done — admin/admin exposed to the internet is asking for trouble.
Step 1: Create your Intelbras DDNS account
Open https://ddns.intelbras.com.br, click Cadastrar-se (Sign up), fill in your name, email, and password, and confirm via the email link. Log in to the portal and register the hostname you want — for example, meustore.intelbras.com.br. This is the address that will resolve to your current public IP.
Step 2: Put the Intelbras device on the network
Connect the device (DVR, NVR, camera, or router) to the LAN via Ethernet. On a computer in the same network, find your local IP with ipconfig (Windows) or ip a (Linux/macOS). Open a browser and reach the device’s IP — commonly http://192.168.1.108. Log in with the factory credentials (often admin / admin) and navigate to the Network (or Configurações de Rede) section to find the DDNS menu.
If you can’t reach the device, confirm the PC is on the same subnet and that no host firewall or antivirus is blocking the connection.
Step 3: Enable DDNS in the device
Menu names vary slightly by model and firmware, but the pattern is the same:
- In the DDNS menu, enable or turn on the DDNS feature.
- In DDNS Server, select
Intelbras DDNS (ddns.intelbras.com.br). - Fill in the hostname (
meustore.intelbras.com.br), the DDNS account email, and the DDNS password. - Save the configuration.
- Wait a few seconds and check the Status field.
A working configuration shows Connected or Successful. If it shows Disconnected or an error, confirm the device has internet access (DNS and gateway are correctly configured), check that the login and password are correct, and verify the hostname isn’t already in use or mistyped.
Step 4: Configure port forwarding on the upstream router
DDNS only resolves the hostname to your IP. For remote access to actually work, you still need to forward ports on the router to the Intelbras device. Typical ports for an Intelbras DVR:
| Service | Port | Protocol |
|---|---|---|
| HTTP (web access) | 80 | TCP |
| Video service / mobile app | 37777 | TCP |
| HTTPS (optional, web secure) | 443 | TCP |
On the main router (the one terminating the internet link), find the Port Forwarding (or Virtual Server / NAT) section and create rules forwarding each port to the device’s internal IP, for example 192.168.1.108. Apply the configuration and restart the router if required. External access then looks like http://meustore.intelbras.com.br (or http://meustore.intelbras.com.br:37777 for the video service).
Every open port increases your attack surface. Only expose what is strictly necessary, and prefer HTTPS wherever the device supports it.
Step 5: Test from outside the network
Always test from a different connection — testing inside the same network gives false positives when the router supports hairpin NAT. Switch a phone to 4G/5G, open http://meustore.intelbras.com.br, and the Intelbras login should appear.
If it doesn’t, check three things: the public IP in the DDNS panel matches what whatismyip.com reports from the site, the ports are actually open (verify with a port-check service), and the forwarding rules target the correct internal IP.
Step 6: Harden the deployment
Once any interface is exposed to the internet, discipline matters:
- Change every default password — replace
admin / adminwith strong, unique passwords per device. - Disable unused services and ports — if HTTP isn’t needed, keep only HTTPS, and turn off P2P or cloud services you don’t use.
- Prefer HTTPS — recent Intelbras firmwares support it on the web interface.
- Keep firmware up to date in scheduled maintenance windows.
- Limit access with per-user accounts instead of a shared admin login.
Document which ports are open on which router for which device. Audits will thank you.
When DDNS is not enough
DDNS works for simple cases — one site, one public IP, one or two devices. It breaks when your ISP places you behind CGNAT (no real public IPv4), when you manage many branches and dozens of open ports, or when security policy makes exposed ports unacceptable.
A tunnel-based approach like NATCloud works the other way. The connection is initiated from inside the customer site outbound to the cloud, so no ports open on the customer router. It works behind CGNAT, double NAT, or triple NAT — as long as outbound internet access exists. You get a central dashboard with per-user permissions, inventory, and availability reports. For the centralized-management path, see our TR-069 guide.