Hello,
I'm new to this topic of security cameras. This is the link to my introductory post about the setup that I'm planning at the moment.
When it comes to network security I'm sure there are best practices this group have been adopting with time so I just don't want to re-invent the wheel and I would prefer to get up to speed with what is recommended.
These are the areas that I'm not 100% sure at the moment.
Network Equipment
I have a spare Edgerouter Lite that I can use and I just ordered a GS108PP
I'm regretting having ordered the GS108PP switch because it is unmanaged and, AFAIK, it wouldn't work if I'm planning to use VLAN to segregate the cameras and BI server from the rest of the network.
I have a USG + 8-US-150W + AC Pro Unifi setup at home and I love how easy is to setup everything.
I was wondering if I should just forget about the hardware at hand and stick to the same combination I'm already familiar with.
Network Segregation
Is the common (best) practice to segregate your cameras and BI server on its own VLAN?
If so, what are the rules for that VLAN? How do I provide the minimal access to do maintenance and remote management?
Remote Access & Notifications
Once the setup is completed, how are you guys managing it remotely?
If taking the VPN route, do I have to be on the VPN all the time to get notifications or what is the best approach?
Apologies for all the questions.
TIA
R.R
I'm new to this topic of security cameras. This is the link to my introductory post about the setup that I'm planning at the moment.
When it comes to network security I'm sure there are best practices this group have been adopting with time so I just don't want to re-invent the wheel and I would prefer to get up to speed with what is recommended.
These are the areas that I'm not 100% sure at the moment.
Network Equipment
I have a spare Edgerouter Lite that I can use and I just ordered a GS108PP
I'm regretting having ordered the GS108PP switch because it is unmanaged and, AFAIK, it wouldn't work if I'm planning to use VLAN to segregate the cameras and BI server from the rest of the network.
I have a USG + 8-US-150W + AC Pro Unifi setup at home and I love how easy is to setup everything.
I was wondering if I should just forget about the hardware at hand and stick to the same combination I'm already familiar with.
Network Segregation
Is the common (best) practice to segregate your cameras and BI server on its own VLAN?
If so, what are the rules for that VLAN? How do I provide the minimal access to do maintenance and remote management?
Remote Access & Notifications
Once the setup is completed, how are you guys managing it remotely?
- VPN?
- Opening ports + SSL + Dynamic DNS?
If taking the VPN route, do I have to be on the VPN all the time to get notifications or what is the best approach?
Apologies for all the questions.
TIA
R.R