CCTV VLAN

[networkmangler]

At the moment I have a flat network but we have recently installed a large amount of CCTV cameras and I have just been asked to install more!

 

So I want to create a VLAN and put all the CCTV cameras on that VLAN and leave the DVR on the default VLAN. I want to do this partly for security to keep the cameras separate and partly to have a go at setting up a VLAN.

 

I have a HP 5406zl core switch. At the moment I have created the CCTV VLAN and given it an IP address, turned on routing, changed the default gateway on the devices to the core switch, added an IP route to our ISP gateway so we can get on the internet.

 

I can ping the CCTV VLAN address from the default VLAN but cant ping a device on that on that vlan. I have connected one of the CCTV cameras directly to the core switch to try to rule out any issues I may get if it was connected to a inter connecting switch. Is there anything I am missing?

 

On one forum it said that you needed to add any local IP's to your ISP default gateway. Would that be something I needed to do? or should it work without doing that? We are on the LGFL so I can make a request to add it if needed

[IrritableTech]

Unless you need your cameras to get out on the internet (for firmware updates for example) then no you don't really need to speak with your ISP I wouldn't have thought. But have you updated the gateway on each of the cameras? Without that they can't respond to the ping request. Their gateway will now be your switches IP in that vlan.

[kennysarmy]

I've been thinking about going down the IP route with our CCTV when money is available and I think I will go for a completely separate physical network, just using spare fibre cores where necessary.

[networkmangler]

I got it to work!

 

I had put the default vlan IP as the default gateway for the CCTV camera. When I changed it to ip of the CCTV vlan it worked (In the core switch)

 

now I need to get it to work on inter connecting edge switches. Having looked into this it looks like I need to use port trunking, is that right?

[caffrey]

On the uplinks yes

[IrritableTech]

Good news.

 

You will need to tag the link from your core switch to your edge switch (and any switches in between) with the CCTV vlan. Then mark the port untagged in your CCTV vlan on the edge switch where your camera connects - assuming your edge switches are HP as well?

[networkmangler]

Boom!

 

It's working!

 

The setup I have is:

 

Core (HP 5406ZL) - Edge (HP 1810G) - Cheapo POE Switch (Zyxel GC1200-5HP)

 

I had to mess around with the settings on the POE switch a bit but got there in the end

 

Once I have got this CCTV project out the way I may look at what else I can setup VLANs for. We have a door entry system that is slowly growing, digital signage in a few places and plenty of printers. Now I have done it once I can plan this out for the future

 

Thank you for all your help

[IrritableTech]

Printers are a good one to pop in their own subnet - noisy things broadcasting more then they should. Glad it is working for you.

 

Boom!

 

It's working!

 

The setup I have is:

 

Core (HP 5406ZL) - Edge (HP 1810G) - Cheapo POE Switch (Zyxel GC1200-5HP)

 

I had to mess around with the settings on the POE switch a bit but got there in the end

 

Once I have got this CCTV project out the way I may look at what else I can setup VLANs for. We have a door entry system that is slowly growing, digital signage in a few places and plenty of printers. Now I have done it once I can plan this out for the future

 

Thank you for all your help

[MatthewL]

Defiantly printers only allow communication with the server VLAN then make sure all users get printers mapped and then they cannot print direct therefore bypassing any accounting solutions.