Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Camera VLAN Configuration

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    5 Posts 4 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      SCCMAdmin
      last edited by

      I am setting up a network and will have security cameras and a DVR present on the network. I have VLANs in use to separate the network traffic.

      I have the regular vlan 8 for computers and 32 for cameras.

      The DVR will need to have access to both VLANs to access the cameras and to be accessed from user computers to login to web interface to view the camera feed/recordings.

      How can I accomplish this?

      Thanks

      1 Reply Last reply Reply Quote 0
      • A
        akuma1x
        last edited by

        So... is pfSense on, or a part of, your network somewhere? You don't say in your original post.

        Assuming it is, the simple answer is yes. But, you would need to create firewall rules for this DVR, and the user computers, to cross VLANs and access the cameras like that.

        Jeff

        1 Reply Last reply Reply Quote 0
        • S
          SCCMAdmin
          last edited by

          Jeff,

          Yes pfsense is the main router/firewall for the network

          When you say that the firewall rule must be set I am assuming you mean that I have to set a rule to allow traffic from source: IP of the DVR to destination: the computer vlan 8 net?

          Thanks

          1 Reply Last reply Reply Quote 0
          • JKnottJ
            JKnott
            last edited by

            @sccmadmin said in Camera VLAN Configuration:

            The DVR will need to have access to both VLANs

            Does the DVR have 2 ports? Some do. If so, then just configure each one for the appropriate network.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by johnpoz

              @sccmadmin said in Camera VLAN Configuration:

              The DVR will need to have access to both VLANs to access the cameras and to be accessed from user computers to login to web interface to view the camera feed/recordings.
              How can I accomplish this?

              That is called routing.. And yes that is how any device in vlan X gets access to devices not on vlan X.. Be they are vlan (tagged) or just different physical networks.

              That is what pfsense does out of the box.

              You can set the rules to be any any on both networks/vlans or you can restrict traffic to the specific ports needed.

              I would NOT recommend dual homing your DVR.. Unless your going to isolate all your camera's behind the DVR itself on different vlan that doesn't even have to touch pfsense. And then another nic on the DVR will give the DVR access to the rest of your network, etc.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.