Camera VLAN Configuration



  • I am setting up a network and will have security cameras and a DVR present on the network. I have VLANs in use to separate the network traffic.

    I have the regular vlan 8 for computers and 32 for cameras.

    The DVR will need to have access to both VLANs to access the cameras and to be accessed from user computers to login to web interface to view the camera feed/recordings.

    How can I accomplish this?

    Thanks



  • So... is pfSense on, or a part of, your network somewhere? You don't say in your original post.

    Assuming it is, the simple answer is yes. But, you would need to create firewall rules for this DVR, and the user computers, to cross VLANs and access the cameras like that.

    Jeff



  • Jeff,

    Yes pfsense is the main router/firewall for the network

    When you say that the firewall rule must be set I am assuming you mean that I have to set a rule to allow traffic from source: IP of the DVR to destination: the computer vlan 8 net?

    Thanks



  • @sccmadmin said in Camera VLAN Configuration:

    The DVR will need to have access to both VLANs

    Does the DVR have 2 ports? Some do. If so, then just configure each one for the appropriate network.


  • LAYER 8 Global Moderator

    @sccmadmin said in Camera VLAN Configuration:

    The DVR will need to have access to both VLANs to access the cameras and to be accessed from user computers to login to web interface to view the camera feed/recordings.
    How can I accomplish this?

    That is called routing.. And yes that is how any device in vlan X gets access to devices not on vlan X.. Be they are vlan (tagged) or just different physical networks.

    That is what pfsense does out of the box.

    You can set the rules to be any any on both networks/vlans or you can restrict traffic to the specific ports needed.

    I would NOT recommend dual homing your DVR.. Unless your going to isolate all your camera's behind the DVR itself on different vlan that doesn't even have to touch pfsense. And then another nic on the DVR will give the DVR access to the rest of your network, etc.