Key features
Standard IP cameras
Works with Hikvision, Dahua, Axis, Bosch and Hanwha over RTSP, ONVIF or HTTPS.
4G / 5G streaming
Enough bandwidth for 1080p and 4K with H.265. Multi-carrier so mobile sites never lose signal.
Static IP for NVR
Dedicated public address to reach the recorder directly — no NAT, no intermediaries.
Cloud VMS
Integration with cloud platforms (Eagle Eye, Milestone, Genetec) for video surveillance as a service.
Alerts & backup
Event-driven clip upload (motion, intrusion) and cloud backup so you don't depend on local storage.
GDPR-ready
End-to-end encrypted traffic over private APN. Access logs for audit trails.
Use cases
Typical problems
- Cameras at construction sites or temporary locations with no fixed line — the customer wants remote NVR access but the single operator doesn't cover the spot.
- 1080p H.264/24fps streaming saturates a standard data plan in days — bill surprise the first month.
- NVR behind operator CGNAT, impossible to SSH/HTTPS from outside without DDNS or intermediate services.
- Physical NVR theft on construction sites — if storage is local-only, all incident recordings are lost.
- Hikvision/Dahua cameras and NVRs exposed directly to the Internet with known CVEs that get exploited within hours.
- Lack of GDPR compliance for cameras recording publicly accessible spaces — incomplete signage or missing DPIA.
Recommended architecture
- 1
Industrial 4G/5G router with multi-operator SIM as the NVR's WAN
The NVR (Hikvision DS-7600, Dahua NVR4, Axis S3008) connects to the router via Ethernet. The router manages the SIM and picks the best available operator. Multi-WAN with failover if more than one connectivity is available.
- 2
Static public IP over SIM for NVR remote access
Without static IP you need DDNS or proprietary cloud services. With static IP + SIM-level firewall (ACLs) you open SSH/HTTPS only to your IT team and block the rest of the Internet — drastically reducing the attack surface.
- 3
Private APN with IPsec encryption to cloud VMS
Streaming tunnels to the VMS (Eagle Eye, Milestone XProtect, Genetec Security Center). Never the public Internet. GDPR-compliant for personal data (identifiable faces, license plates) with mandatory network segmentation.
- 4
Generous per-camera data plan or single backhaul per NVR
A 1080p H.265 camera at continuous 15fps uses 50-150 GB/month. NOT viable per-SIM individually. The realistic architecture is: NVR centralizes streams → 4G/5G backhaul transmits ONLY event clips + thumbnails + on-demand access. Drops consumption to 1-10 GB/month depending on event frequency.
Indicative data plan
| Device | Typical monthly traffic | Recommended plan |
|---|---|---|
| NVR + 4-8 IP cameras, event-only transmission | 1-5 GB/month | 5 GB / Pooled data plan |
| Standalone 4G/5G camera with motion-only upload | 500 MB - 2 GB/month | 2 GB plan |
| 1080p H.265 24/7 streaming camera | 50-150 GB/month | Enterprise pooled data + cost study |
| Continuous 4K streaming | 200-500 GB/month | Only sensible with fiber backhaul; cellular is not cost-effective |
Indicative figures with H.265 compression. H.264 doubles consumption. Continuous cellular streaming has prohibitive cost; realistic architecture = local recording + selective event upload.
When to use static IP
- The NVR must be reachable from the NOC or integrator team for diagnostics, configuration, and remote recording review.
- The cloud VMS requires connection from a registered source IP (per-customer allowlist) to accept streams.
- Regulatory audit (GDPR, banking, defense) requires per-IP traceability of each camera or NVR.
When to use private APN
- Streams contain personal data (faces, license plates, children at schools, patients at clinics) and GDPR mandates network segmentation.
- Critical infrastructure deployment (banking, defense, energy) where private network is a customer requirement, not an option.
- High risk of targeted attacks on Hikvision/Dahua cameras — private APN makes them unreachable from the public Internet.
Compatible devices
Hikvision DS-2CD / NVR DS-7600 series
IP cameras and NVRs in mass use across Spain. Support ONVIF, RTSP, HTTP/HTTPS. Important: update firmware regularly — they have a history of actively exploited CVEs.
Dahua IPC / NVR4 series
Main alternative to Hikvision with similar profiles. Same care with firmware and Internet exposure.
Axis Communications M, P, Q series
High-end cameras with robust AXIS OS and low attack surface. More expensive but standard in critical projects (defense, banking).
Bosch FLEXIDOME / DINION
Industrial cameras with powerful on-edge analytics (intrusion detection, person counting). Compatible with Bosch BVMS and third-party VMS.
Teltonika RUTX12 / RUT956 routers
4G/5G routers with dual SIM and automatic failover. Standard at construction sites and temporary locations. Accessible SIM slot for fast replacement.
Cradlepoint IBR series
Professional-grade 4G/5G routers with NetCloud Manager. Enterprise deployments with centrally managed router fleets.
Frequently asked questions
- Can I record 24/7 at 1080p over a 4G SIM?
- Technically yes, but not cost-effective. A 1080p H.265 camera at continuous 15fps uses ~50-150 GB/month. At standard per-GB rates, that's hundreds of euros per month per camera. The sensible architecture is: local NVR recording + selective event upload (motion, intrusion) + on-demand access. That drops consumption to 1-10 GB/month.
- Do I need static IP for the customer's app to work?
- For apps that connect directly to the NVR (Hik-Connect, DMSS, Genetec Mobile) yes — the app needs a stable endpoint. Without static IP you depend on proprietary P2P cloud services that add latency and vendor lock-in. With static IP + firewall ACLs, you control access.
- How do I meet GDPR with cameras at a construction site or public venue?
- Three requirements: visible signage informing of recording + DPIA if high-risk + limited retention (typically 30 days, except for events). GDPR applies the moment images can identify a person. Cameras with on-edge analytics that only count or detect events without recording significantly reduce risk.
- Will 4K streaming work on normal 4G coverage?
- Depends on coverage quality. Stable 4K H.265 at 15fps needs ~10-15 Mbps sustained. On strong 4G LTE coverage (>-90 dBm RSRP) yes; on marginal or congested 4G, no. For critical 4K, use 5G where available or downscale to 1080p over 4G.
- What if my construction-site NVR gets stolen?
- If you only record locally, you lose the incident recordings — including the theft itself. The defensive architecture is: cameras + local NVR + simultaneous event upload to the cloud. Even if the NVR is stolen, the cloud retains the theft event clips. Extra cost: backhaul data plan, but it pays off on high-value projects.
- Why do experts recommend not exposing Hikvision/Dahua cameras to the Internet?
- Both vendors have a history of critical CVEs (CVE-2017-7921, CVE-2021-36260, etc.) exploited at massive scale by botnets. If the camera is reachable from the public Internet, it will be compromised within hours or days, especially without monthly firmware updates. Solution: private APN, or NAT with port forwarding only to specific IPs. Never exposed.
Pre-deployment checklist
- 1Per-site inventory: cameras (model, resolution, fps), NVR (model, capacity, channel count), cellular router if applicable.
- 2Realistic consumption estimate based on architecture (continuous vs event) and plan sized at 2x.
- 3Static IP decision (recommended for remote access) vs dynamic IP.
- 4Public APN with encryption vs mandatory private APN if personal data or customer requires it.
- 5Camera and NVR firmware update policy (monthly minimum).
- 6GDPR compliance: signage, DPIA, retention, documented legal basis.
- 7NVR theft response procedure — is simultaneous cloud upload active?
- 8SIM or router ACL configuration so only the customer's team can access the NVR.
- 9Camera and NVR configuration backup plan (if equipment is lost, what's the rebuild cost?).
- 10Pilot of 1-2 sites for 1 month verifying real data consumption, remote access latency, and failover robustness if multi-SIM.
Need a printable version? See the pre-deployment guide.
Have a project in mind?
Tell us your use case and we'll help you find the best connectivity solution.