Set up cameras on a Comcast/Xfinity home network

[jfjones]

I am looking to help my daughter set up two cameras on her Comcast Xfinity modem/router network. I already have her cameras here (thanks Andy) for testing and configuring. I have looked through the various forum discussions (Nayr discussions) and others on this topic and have not really found a similar solution.

For my home network I have all Ubiquiti gear and seperate VLANS for Cameras, IOT, Guest and Home.

My concern for her network is to keep the camera network secure.

Considering a separate Blue Iris PC with video storage (may also consider a NVR solution). She does have Home Assistant that I would like to use to present camera views. And most likly the Blue Iris app on her phone for remote management.

Any suggestions on separate switch/network configurations to connect to the Comcast device and secure her cameras? How have others solved this on a Comcast ISP?

Thanks, John.

 

[biggen]

If you are already doing VLANS, then put them in their own VLAN and disallow internet access from any device inside that VLAN.

 

[jfjones]

If you are already doing VLANS, then put them in their own VLAN and disallow internet access from any device inside that VLAN.

That is my plan but what I am not sure of is the Xfinity gear does not seem to support VLAN'ing. This setup is for her home in Virginia so I'll be settingup and testingwhat I can here in Michigan. I'm thinking she'll need a managed switch connected to the Xfinity modem/router/switch/wifi box. Then the cameras and BI PC on that switch on a separate VLAN.

 

[tangent]

That is my plan but what I am not sure of is the Xfinity gear does not seem to support VLAN'ing.

The simplest way to isolate the cameras when using a PC based VMS is to put 2 NICs in the PC, use different subnets, and not define any routes between them. You will want to run an NTP server on the PC to set the time on the cameras. You could use tailscale or zerotier to facilitate remote access.

 

[biggen]

That is my plan but what I am not sure of is the Xfinity gear does not seem to support VLAN'ing. This setup is for her home in Virginia so I'll be settingup and testingwhat I can here in Michigan. I'm thinking she'll need a managed switch connected to the Xfinity modem/router/switch/wifi box. Then the cameras and BI PC on that switch on a separate VLAN.

If you are using your own router/switch then it doesn't matter. The cable modem is just a dumb OSI layer 1 and 2 device that is just passing internet traffic. It has no concept of VLANS if you are running a router behind it as your router handles all of that. Now if you are using their modem as a router/switch, then it is gonna be craps shoot. She really needs to run her own router and switch. That way it doesn't matter what the cable modem can or can't do.

I run VLANS in my home. I'm also an Xfinity customer. Works fine using all my own switches and router.

 

[jfjones]

If you are using your own router/switch then it doesn't matter. The cable modem is just a dumb OSI layer 1 and 2 device that is just passing internet traffic. It has no concept of VLANS if you are running a router behind it as your router handles all of that. Now if you are using their modem as a router/switch, then it is gonna be craps shoot. She really needs to run her own router and switch. That way it doesn't matter what the cable modem can or can't do.

I run VLANS in my home. I'm also an Xfinity customer. Works fine using all my own switches and router.

Thanks, you confirmed what I suspected on the Xfinity setup. All she has now is their modem/router/switch. I was pretty sure I'd need to get her setup like I have here with her own equipment.