So, as I said in my first/intro post, I am a long time lurker (>2 yrs) and a recent joiner.
I have read tons of posts, studied key Wiki threads and am near to taking the plunge, to acquire 2 (to start) IP cameras and buy/use BI. I have 30+ years in hitech, both HW and SW and am comfortable with everything I have read so far but I hear this [not so faint] ticking sound. Lots of thought to cable routing, which POE switch to buy (was leaning towards Ubiquiti until I saw looney2ns post yesterday, sigh).
Being somewhat thorough (some might say anal) I created a diagram showing what I think I want to create. Using it, I have some questions (below).
In the diagram, the blue features have been working for a long time. The VPN is the most recent addition but has been up/stable for 6+ months. From miles away I can use my phone to access 2 RaspberryPi web pages I created/use inside my LAN. Woohoo.
In the diagram, the red features are what I propose to add (i.e. things I need to buy, configure, etc.). Some questions below but please volunteer comments on the basic architecture too:
Q1: My network knowledge is self taught thus somewhat limited. I want to keep the cameras off the WAN (i.e. ensure they cant call home, cant be hacked, etc.). I am considering buying a managed switch, so I can configure rules for each IP/MAC (each camera). I need to buy a new switch anyway (to get POE+) so why not make it a managed switch. Comments?
Q2: I am not clear on how to treat the BI computer. I was hoping it could be headless (no local display). I would use VNC or remote desktop (RDP) to access it from the other desktops for routine use (I already have VNC working between a W7 desktop and 2 headless RaspberryPis so how hard could it be, right?). I also want to access the BI computer via the VPN. So, I could use some advice on how configure the managed switch to do this but also keep the cameras secure.
Q3: I am hoping to use WiFi+HDMI to display (only) BI/UI3 on a 32" wall mounted TV. However, I am not sure whether this is possible or do I need a monitor? Where are the pitfalls given 2-4 2MP cameras, 15FPS, etc. Or, since this is video being displayed (right?), can I ignore the bandwidth of the data stream from the cameras? I will be building an adequate BI computer (i7/W10) so thats not the limiting factor. Note that I don't want/need to control BI from this display (I will login via desktop or phone/VPN to do that), I just want to echo the display of what BI/UI3 is currently displaying. As I think on this, this may not have anything to do with BI/UI3 but rather its just a computer display challenge, but comments welcome anyway. Anyone done this?
Thanks guys.

I have read tons of posts, studied key Wiki threads and am near to taking the plunge, to acquire 2 (to start) IP cameras and buy/use BI. I have 30+ years in hitech, both HW and SW and am comfortable with everything I have read so far but I hear this [not so faint] ticking sound. Lots of thought to cable routing, which POE switch to buy (was leaning towards Ubiquiti until I saw looney2ns post yesterday, sigh).
Being somewhat thorough (some might say anal) I created a diagram showing what I think I want to create. Using it, I have some questions (below).
In the diagram, the blue features have been working for a long time. The VPN is the most recent addition but has been up/stable for 6+ months. From miles away I can use my phone to access 2 RaspberryPi web pages I created/use inside my LAN. Woohoo.
In the diagram, the red features are what I propose to add (i.e. things I need to buy, configure, etc.). Some questions below but please volunteer comments on the basic architecture too:
Q1: My network knowledge is self taught thus somewhat limited. I want to keep the cameras off the WAN (i.e. ensure they cant call home, cant be hacked, etc.). I am considering buying a managed switch, so I can configure rules for each IP/MAC (each camera). I need to buy a new switch anyway (to get POE+) so why not make it a managed switch. Comments?
Q2: I am not clear on how to treat the BI computer. I was hoping it could be headless (no local display). I would use VNC or remote desktop (RDP) to access it from the other desktops for routine use (I already have VNC working between a W7 desktop and 2 headless RaspberryPis so how hard could it be, right?). I also want to access the BI computer via the VPN. So, I could use some advice on how configure the managed switch to do this but also keep the cameras secure.
Q3: I am hoping to use WiFi+HDMI to display (only) BI/UI3 on a 32" wall mounted TV. However, I am not sure whether this is possible or do I need a monitor? Where are the pitfalls given 2-4 2MP cameras, 15FPS, etc. Or, since this is video being displayed (right?), can I ignore the bandwidth of the data stream from the cameras? I will be building an adequate BI computer (i7/W10) so thats not the limiting factor. Note that I don't want/need to control BI from this display (I will login via desktop or phone/VPN to do that), I just want to echo the display of what BI/UI3 is currently displaying. As I think on this, this may not have anything to do with BI/UI3 but rather its just a computer display challenge, but comments welcome anyway. Anyone done this?
Thanks guys.
