NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

bob_smith123's avatar
bob_smith123
Aspirant
Jan 27, 2022

Camera/NAS VLAN on GS728TPv2 not working

Hello,  

I have a GS728TPv2 and would like to set up a VLAN for my POE cameras and NAS.  I would like the NAS to be able to access the internet so I can view the camera streams and recordings and would like the cameras to feed into the NAS but not connect to the internet. I've tried the VLAN setup below but it is not working - I can log into the NAS but the cameras show as disconnected.  Note that when testing on the same VLAN with all ports untagged and PVIDs the same everything works fine (but cameras are exposed to internet which I would prefer not to have).  Is there anything I can do to make this work?  Thanks!

 

VLAN 1 - Default (internet)

port1 - untagged - PVID1 - connected to router 

port23 - untagged - PVID1 - connected to NAS 

 

VLAN20 - cams

port19 - untagged - PVID20 - connected to camera 

port21 - untagged - PVID20 - connected to camera

port23 - untagged - PVID1 - connected to NAS

 

4 Replies

  • JeraldM's avatar
    JeraldM
    NETGEAR Employee Retired

    bob_smith123,

     

    Welcome to the community! 

     

    Perhaps what you'll need to do is to have a traffic rule set on your firewall to block incoming traffic from the WAN going to the IP addresses of your cameras.

     

     


    Regards, 

    JeraldM

    NETGEAR Community Team

    • bob_smith123's avatar
      bob_smith123
      Aspirant

      Hello, thank you for the reply.  This same exact setup worked perfectly with a smaller plus managed switch without needing to change firewall or router settings.  Is there a reason why it is not working with the GS728TPv2 switch?  

      • schumaku's avatar
        schumaku
        Guru - Experienced User

        bob_smith123 wrote:

        This same exact setup worked perfectly with a smaller plus managed switch without needing to change firewall or router settings. Is there a reason why it is not working with the GS728TPv2 switch?  


        Yes. The config isn't a plain VLAN design strictly isolating the VLAN. Much more it is an Asymmetric VLAN config. The odd thing is that all the UIs allow this [in strict IEEE 802.1q sense] invalid config. 

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More