NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
VLAN for NVR - security camera isolation
Situation :
- I have a NVR with 1 LAN connection and 4 POE camera connections.
- Camera connections and internet access are in the basement.
- I want to put the NVR in the office for accessibility reasons.
- There is one CAT6 cable connecting office and basement.
I would like to set up a vlan between the basement camera connections and one NVR camera connection, goal is to have the camera’s accessible only by the NVR.
There is a GC110P switch in the basement, and a GC110 switch in the office.
Defining a VLAN between port 8 on the office switch (POE port 1 on the NVR) and ports 5-8 on the basement POE switch doesn’t work, the NVR does not find the camera’s.
What am I missing ? Any help is most welcome!
5 Replies
Sorry, newbie here, the diagram doesn't show in the post.
In-line images are under mandatory moderation, these will become visible when the Netgear mods are active.
Before braking a leg. Does your router have the ability to handle an additional VLAN with a dedicated IP subnet, or does this undefined NVR have the ability to handle a dedicated network for the camera, plus a dedicated link to the home/office network with the Internet access?
In general:
- Create the VLAN on both switches, eg. VLAN ID 123.
- For the ports creating the link between the two switches (sw. 1, port 1; sw. 2 port 2 - not marked yet on your design - make it a different color) add the VLAN 123 as [T]agged to both ports (on top of the VLAN 1 and PVID 1) - this does create the trunk between the two switches.
- For the ports where the cameras and the NVR are connected (all the ports marked red), change to VLAN 123 [U]ntagged, PVID 123 - this does create access ports for the VLAN 123.
Undefined to this point is what infrastructure does handle the additional network, the dedicated IP subnet, it's DHCP server, .... is it's unclear if/how the NVR does handle it.
Last but not least: Does the GC110P power the cameras? Some NVR have dedicated ports with non-standard power-over-network-cables.
Hello schumaku
The router is a Netgear Orbi RBR50, the NVR is an Ezviz X5S.
If I remove the vlan, the camera is found by the NVR and works, so connection to and power from GC110P is ok.
As a test, I have connected a camera directly to POE port 1 of the NVR.
To my surpise, I can ping that camera from my desktop, apparently it gets an ip address from the Orbi router. I expected the camera to be isolated from the LAN courtesy of the direct connection to the NVR and the NVR then managing the camera, but that's obviously not the case.
So my idea of "just" setting up a vlan between one of the NVR POE ports and the camera's, that would not isolate the camera's anyway.
How can I proceed ?
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
