Camera VLAN Configuration

SCCMAdmin · Dec 29, 2018, 2:33 AM

I am setting up a network and will have security cameras and a DVR present on the network. I have VLANs in use to separate the network traffic.

I have the regular vlan 8 for computers and 32 for cameras.

The DVR will need to have access to both VLANs to access the cameras and to be accessed from user computers to login to web interface to view the camera feed/recordings.

How can I accomplish this?

Thanks

akuma1x · Dec 29, 2018, 3:36 AM

So... is pfSense on, or a part of, your network somewhere? You don't say in your original post.

Assuming it is, the simple answer is yes. But, you would need to create firewall rules for this DVR, and the user computers, to cross VLANs and access the cameras like that.

Jeff

SCCMAdmin · Dec 29, 2018, 4:21 AM

Jeff,

Yes pfsense is the main router/firewall for the network

When you say that the firewall rule must be set I am assuming you mean that I have to set a rule to allow traffic from source: IP of the DVR to destination: the computer vlan 8 net?

Thanks

JKnott · Dec 29, 2018, 11:52 AM

@sccmadmin said in Camera VLAN Configuration:

The DVR will need to have access to both VLANs

Does the DVR have 2 ports? Some do. If so, then just configure each one for the appropriate network.

johnpoz · Dec 29, 2018, 12:20 PM

@sccmadmin said in Camera VLAN Configuration:

The DVR will need to have access to both VLANs to access the cameras and to be accessed from user computers to login to web interface to view the camera feed/recordings.
How can I accomplish this?

That is called routing.. And yes that is how any device in vlan X gets access to devices not on vlan X.. Be they are vlan (tagged) or just different physical networks.

That is what pfsense does out of the box.

You can set the rules to be any any on both networks/vlans or you can restrict traffic to the specific ports needed.

I would NOT recommend dual homing your DVR.. Unless your going to isolate all your camera's behind the DVR itself on different vlan that doesn't even have to touch pfsense. And then another nic on the DVR will give the DVR access to the rest of your network, etc.