@Solla-topee  your tapo camera is a customized act divice and is currently locked 

And s/no: 220B234001742

AND NEXT ONE

S/NO:220A016000258

@Solla-topee , thanks for the interesting document, but I like my Tapo out of internet !

My solution based on ONVIF Device Manager, satisfies my needs, only with the inconvenience of having to repeat the sync at each Tapo boot!

It is a pity that TP-Link does not allow a more privileged access to Tapo's core to better manage these configurations allowing a good exploitation of the camera's capabilities!

Think about that, users would appreciate it, even if it means breakage of warranty!

@Solla-topee Nice. Working Thumbs up

@Solla-topee 

I have c200 (2x) and c310 for outside.

all of them work fine, with unrestricted access.

if you dont want that,

these 2 models at least,

need the following access going from your cam towards the internet:

DNS: port 53 TCP   # although mine work fine with dhcp assigned DNS, which is my router itself...

https : port 443 TCP # in and outgoing connection channel towards ur phone app..

NTP : port 123 UDP  # sync with internet time

optonal : port 554 TCP # if you want to access live stream of your cam from internet with e.g. your PC, VLC or something like that..... dont if u dont know what that is / do not need it. it involves having a userid / password going over the internet....

that is all. NOTHING more is needed, contrary to a lot of "advice" like: allow everything, put them in dmz,  and such

( and risk that bandits guess your cam password and then can see if u are at home / spy on you.... )

you can now use  all functions of tapo app :

see image / video feed

get notifications

manage cams / notifications etc etc

- from the internet

- and from your local wifi at home 

using the android tapo app. i dont have iphone, i guess it will work.

@Solla-topee this is 2021 almost 2022.... A Tapo C200 is a consumers camera. Do you really expect consumers to make a deepdive in these settings?

@JensNL 

JensNL wrote

@Solla-topee this is 2021 almost 2022.... A Tapo C200 is a consumers camera. Do you really expect consumers to make a deepdive in these settings?

uhm... well....

if you allow your devices going from your local network out into the internet *without* restrictions, Tapo devices work out of the box.

so yes. its 2022, already today....

Otherwise, you need to restrict them as described in the post.... deny all, allow 443 /tcp and 123 /udp going out

automatically is possible :

there is an alternative technology... uPnP, that is, you allow a vendors' device to reconfigure the firewall of your internet modem....

I would not recommend that.....  and TAPO does not try to do that as far as I know....

@Solla-topee 

good day,

I am having trouble with my 3 cameras - the date and time is incorrect

Cam1

model: Tapo C200 (US)

S/N: 22161X4000999

Cam2

model: Tapo C200 (US)

S/N: 22161X4004311

Cam3

model: Tapo C200 (US)

S/N: 22161X4003608

@due40 

additional:

update will not work, cams need other access

besides what I described.

i simply disable block and start upgrade

after finishing upgrade i enable block again: a work around, obviously..... .

would be nice if tp can tell us what they need for cam to update??