Network Overhaul - VLANs, Hyper-V, NVR etc...

[Whistler]

Hi,

 

I work in a small office and we are currently re-designing a portion of our network.

 

We have acquired some IP security cameras and hope to integrate them into our network. Currently as a test I have put them on the main VLAN and they are working fine. However, I want to put them on their own separate network.

 

We run an NVR in it's own VM from within Hyper-V, and I hope to put that on the same VLAN as the cameras. We only have Layer 2 Switches, so from my understanding we can't have "inter-communication" between VLANs without Layer 3?

 

Ideally, I'd want to have the NVR and CCTV on the same VLAN, along with a "Management VM" whereby I could look back at the footage. Accessing it off the phone would be nice, but not essential.

 

I'd create a new VLAN, tag the port on the switch and set the ID of the VLAN within Hyper-V, is that correct? Is there anyway I could access this from the main network?

 

Cheers to any advice you could give.

 

Whistler.

[rom1984]

Do you have a router on site that you can configure as a router on a stick?

 

My understanding would be that you would not be able to access the VLAN that is separate from your main network unless you had a router configured as a "router on a stick" or L3 switches (or an additional network card configured on the same network as the CCTV to get local network connection)

[Whistler]

Do you have a router on site that you can configure as a router on a stick?

 

My understanding would be that you would not be able to access the VLAN that is separate from your main network unless you had a router configured as a "router on a stick" or L3 switches (or an additional network card configured on the same network as the CCTV to get local network connection)

 

Hi, I don't have a spare router. Would any one do? Thx.

[rom1984]

When I said do you have a router on site, I meant does your office not have internet/WAN access? If so then there must be some kind of router that your LAN hits at some point to get WAN access? Could you look at configuring that as what Cisco call a router on a stick.

 

If you put another router on the network you would need to config the existing router to have a static route to the "new router" so when it receives packets destined for your CCTV network it knows what router to fwd them to. I think it would just be more cost effective and less complicated to either configure the existing router to do the above or put a L3 switch in. (or replace the existing router with a cisco router all together if this would be compatible/cost effective for you and configure as a router on a stick)

 

Unless anyone knows of another way?

[Davit2005]

You could use a MikroTik to do IntervLAN routing rather than a router instead of a Layer3 switch but if you going to spend money take a look at the HP 1920 switch range they are well priced and are Layer3 Lite I believe. I have one at home and they are silent, take low power. I'm not doing IntervLAN routing though as I have 2 MikroTiks as VMs running VRRP performing that function.

 

You should get better performance and easier management if you use a Layer3 switch IMO.

Edited March 28, 2017 by Davit2005