CCTV - IP cameras - vlans?

[Koldov]

We have just had a firm come in to look at our ageing CCTV system.

 

They have advised ripping it all out and starting again (of course).

 

However, to be fair, it is very old and a mixture of copper (cat) cable runs wired in with co-ax adaptors.

 

The runs aren't using outdoor spec cable and a lot of the camera domes leak (and then mist up), or are in a position where the sun blinds them (they are also quite poor resolution).

 

They have advised IP cameras, so I presume will need some sort of plugging in to a patch panel and needing static IP addresses.

 

Does anyone suggest creating a seperate VLAN for these? I'm thinking 8 cameras putting hi-res video through 24 hours a day will have some impact on the network capacity anyway and at least a VLAN might mitigate some issues?

[Colditzz]

Yes, CCTV cameras should absolutely be on their own VLAN! The bandwidth usage for HD 1080P (depending on quality and codec) should be between 2 and 12.0 Mbps per camera.

[OSSMAPhil]

That's a question I was thinking as well. I have now found 2 companies who are prepared to not rip everything out, but upgrade in sections meaning a smaller capital spend for us.

we have 32 onvif IP cameras and 32 coax cameras.

We are looking to keep the 32 IP cameras and just replace the NVR which is on its last legs, and connect those cameras.

Then over time, get another NVR and slowly replace the coax cameras with IP or for those on poles outside and still working use coax to IP converters.

 

Do you have any recommendations on the brands of NVRs?

So far I am looking at either IDIS or Hikvision. Both are installed at local establishments close to us, and both seem as good as each other, and similarly priced, so need soon long-term feedback if anyone has any for either manufacture.

[OSSMAPhil]

we are currently running 32 IP camearas on 720p. Had to change due to performance issues when all at 1080p, but would a VLAN help that much as they are still going through the same switches.

Would it be better for the network if we had a dedicated switch for the camearas?

[Davit2005]

Security/Privacy/Limiting Access is also another reason to have them on their own vlans. Employ ACLs or security if the vlan is going to be routed on the same switch as your normal client vlans.

[Colditzz]

If possible/practical, a dedicated switch for the cameras would make sense as you can at least scope and then guarantee the bandwidth needed is available. Running a separate VLAN for the cams will not help with the bandwidth restrictions as it still has to traverse the same uplinks/trunks.

 

As for recommendations for the equipment, I have none I'm afraid.

[netadmin]

I would strongly recommend a separate VLAN as well, for increased security. I blocked my security camera VLAN from being able to access the internet - this avoids any risk from potential security vulnerabilities on the cameras themselves.

Separate switches would be optimal from bandwidth perspective, but it may be more cost effective to upgrade your backbone to a higher speed and re-use your current switches.

 

For cameras, try to select models that use H.265 encoding rather than the H.264 encoding when possible - this uses a fraction of the bandwidth that H.264 cameras did, and also reduces storage needs on the NVR as well.

[Wubbalubbadub]

I went for seperate switches. My switches have a 10GB fibre back to the core, but i just didnt want that kind of traffic constantly hovering over my network. Also, as someone above said. Block the internet on that VLAN / Network. Don't want that getting out!

[6Foot2]

We have 55 cameras on two NVRs. We have a dedicated CCTV VLan for the NVRs and the cameras.

 

Since it went in three over years ago it hasn't given us any issues.

 

Bonus: I have been asked if it would be a better and cheaper solution if we used Hive, or Nest cameras instead.

 

[PotNoodleTech]

Same issue here, archaic coax CCTV system that costs a fortune to repair the cameras etc, existing support contract with a company who have not provided value for money.

 

Ripping it all out and rolling our own system now using Hikvision DVR and PTZ CCTV cameras that only require 1 x CAT6 cable on a POE port to function. No third party companies involved, no expensive support contracts to be tied in to. Just happiness.

 

But yes in answer to the question, CCTV should be on it's own VLAN.

Edited January 29, 2019 by PotNoodleTech

[Jcx500]

I Had my Cameras put on a different network and just had a link to from my main network to my NVR

[supportman]

we are currently running 32 IP camearas on 720p. Had to change due to performance issues when all at 1080p, but would a VLAN help that much as they are still going through the same switches.

Would it be better for the network if we had a dedicated switch for the camearas?

I would put them on separate switches using the spare fiber cores personally.

[PotNoodleTech]

Question here - what would be a better thing to do, spend money on a separate physical infrastructure just for the CCTV cameras, or take that money and put it towards upgrading your main network to be as fast as possible (i.e 10gig) and then use vlans.

 

I personally think the latter and that's the way I am going.

[atcoates]

I would put them on separate switches using the spare fiber cores personally.

That's the option we went for as well. We used cheaper switches and keep a spare on site.

[k-strider]

That's the option we went for as well. We used cheaper switches and keep a spare on site.

and thats what we did too just a route to the network from the main network switch.... so we can interact with the cameras but keep them on separate switches and vlan...

 

we use Axis Camera Station and a mix of Axis cameras... originally (probably 8 ish years ago) we bought a BNC module that allowed 8 old style cameras to appear as axis ip cameras but if i was doing it now i would just replace the lot.

we are now upto about 45 cameras.

Edited January 30, 2019 by k-strider

[Sonic007]

We have our CCTV system on a completely separate network.