StandTech
ZKBioTime Network Guide

Port Forwarding + DDNS Setup for ZKBioTime (Open Anywhere)

This page answers the most common questions people ask when they want to open ZKBioTime remotely and connect ZKTeco devices through a DDNS domain in Cloud Server Setting (ADMS/PUSH). It follows the same approach explained in your video tutorial.

Quick Configuration Flow

  1. Set a static LAN IP for the ZKBioTime server.
  2. Choose ADMS port in ZKBioTime communication settings (usually 8088).
  3. Create router NAT/Port Forward rule to this server IP and port.
  4. Configure DDNS domain to follow your changing public IP.
  5. Allow this port in Windows/Linux firewall and cloud firewall.
  6. On terminal: COMM → Cloud Server Setting.
  7. Server Address = DDNS domain, Port = forwarded ADMS port.
  8. Test from external network (4G), then verify device online in ZKBioTime.

Mandatory Fields on ZKTeco Device

  • Enable Domain: ON (if device supports it).
  • Server Address: your DDNS hostname (example: company.ddns.net).
  • Port: same as ADMS port in ZKBioTime.
  • Protocol: HTTP / HTTPS based on your server configuration.
  • DNS: valid resolver (router DNS or 8.8.8.8 / 1.1.1.1).

Most Asked Questions (Port Forwarding + DDNS + Cloud Server)

1) Which port should I forward for ZKBioTime?

Forward the exact ADMS/PUSH port configured in ZKBioTime communication settings. Many installations use 8088 (HTTP), but your setup may differ.

2) Should I use public IP or DDNS domain in Cloud Server Setting?

Use a DDNS domain when your ISP gives dynamic public IP. Put that domain in Cloud Server Setting so devices keep connecting even after IP changes.

3) Device says disconnected. What do I check first?

Check 4 points first: DNS works on device, port-forward points to correct internal server IP, firewall allows the port, and ADMS service is running on the server.

4) Should NAT rule be TCP or UDP?

Usually TCP. If your router supports both, choose TCP/UDP only if required by your firmware documentation.

5) Can multiple devices use the same DDNS + port?

Yes. Multiple terminals can push to the same ZKBioTime server domain and ADMS port as long as serial numbers are unique and license capacity is valid.

6) Why does it work on LAN but not on internet?

Most common causes: CGNAT from ISP (no real public IPv4), wrong WAN IP in DDNS, blocked inbound port, or cloud security group not allowing traffic.

7) Which cloud server settings are required in communication menu?

In device menu, open Communication/COMM → Cloud Server Setting, then set server address (domain), port, and enable push/ADMS. Save and reboot device.

8) Do I need HTTPS certificate?

Not mandatory for all deployments, but recommended. If using HTTPS, ensure firmware supports SSL/TLS and use the correct HTTPS port/certificate chain.

Résumé Français (FAQ la plus demandée)

Les questions les plus fréquentes sont: quel port ouvrir, comment lier DDNS au routeur, quelle adresse mettre dans Cloud Server Setting, et pourquoi le terminal reste offline. Réponse rapide: utilisez le domaine DDNS + port ADMS exact, activez NAT/port forwarding vers le serveur ZKBioTime, puis autorisez ce port dans les pare-feu.

ملخص بالعربية (أكثر الأسئلة تكراراً)

أكثر الأسئلة تكون حول: ما هو المنفذ الصحيح؟ هل أكتب IP عمومي أم دومين DDNS؟ لماذا الجهاز يظهر Offline؟ الحل المختصر: افتح نفس منفذ ADMS في الراوتر نحو سيرفر ZKBioTime، ثم في الجهاز من Communication → Cloud Server Setting اكتب اسم الدومين DDNS والمنفذ نفسه، وتأكد من DNS والجدار الناري.