Possible to implement dual NIC with detatched garage fed by fiber?

Type2

Young grasshopper
Dec 17, 2017
52
20
I have recently been getting more serious about implementing an isolated network for my blue iris macine and cameras. I was initially leaning towards a VLAN or setting up specific rules for each POE camera to prohibit outbound traffic, but I read that multiple cameras can slow down my router. I have nine cameras and never noticed any network performance issues, but perhaps there are issues that I am unaware of. I do occasionally get short delays when remote streaming (the orange clock icon).

The cunundrum that I face is that I cannot physically plug all of my cameras into one router. Five of my cameras are on my house and feed directly into the POE router. No issue there. The problem that I face with a dual NIC setup is that I have four other cameras that are on my detached garage about 30' from my house. I have an underground conduit that I ran from my house to the garage to feed a 60 amp sub panel. Due to possible interference, I ran a fiber cable in the conduit instead of multiple Cat 6 cables.

The fiber setup is like this:
[HOUSE] MikroTik 8 port Fiber Cloud Router Switch -----> [GARAGE] Mikrotik 5 port Fiber Cloud Router Switch ----> Unifi 8 Port Switch -----> 4 POE cameras [Dahua] & Unifi wireless AP

I would like to keep the Unfi wireless AP functional for general internet connections since I work in the garage frequently.

If I want to implement a dual NIC system, I am unsure how to physically integrate the four garage cameras in the isolated Blue Iris IP Camera LAN.

My current network setup is as follows:
Unifi UXG Pro
Unifi CloudKey+ Gen 2
Unifi Pro Max 48 PoE switch
MikroTik 8 port fiber router (4 desktop PC's connect via 10G fiber, including Blue Iris and Plex server)
Mikro Tik 5 port fiber router (located in garage connected to Unifi 8 port switch which serves Unifi wireless AP and four IP cameras)

My current camera setup (everything is hard wired):
Dahua IPC-HDW5231R-ZE (5x)
Dahua IPC-T5442TM-AS 4mp (3x)
Amcrest 4MP IP4M-1051B (1x)

If the UXG Pro has enough horsepower to handle the cameras saturating the network, then maybe using a VLAN is the best option.

Any thoughts?

Thanks ahead of time.
 
I read that multiple cameras can slow down my router
This common advice is only meant to prevent people using their crappy internet router as a network switch. For example, someone plugs their Blue Iris PC into their ISP-provided router so that all IP cam traffic has to pass through the internet router, and it happens to be a crappy router that uses a lot of CPU cycles to pass around LAN traffic, so it does not perform optimally and their internet speed suffers as a result.

You don't have to worry about that. You are using a $500 Unifi UXG Pro as an internet router. Even if you managed to configure your LAN in such a way that all the camera traffic had to pass through your UXG Pro, it would still be fine. But unless you've done something very weird, then your camera traffic is not even touching the UXG Pro anyway and it is just following the most direct route from each camera to your Blue Iris PC.

As for setting up a VLAN for your cameras to prevent them having internet access, that is still an option but you would be doing it for cybersecurity reasons, not for performance reasons.
 
  • Like
Reactions: Mike A.
This common advice is only meant to prevent people using their crappy internet router as a network switch. For example, someone plugs their Blue Iris PC into their ISP-provided router so that all IP cam traffic has to pass through the internet router, and it happens to be a crappy router that uses a lot of CPU cycles to pass around LAN traffic, so it does not perform optimally and their internet speed suffers as a result.

You don't have to worry about that. You are using a $500 Unifi UXG Pro as an internet router. Even if you managed to configure your LAN in such a way that all the camera traffic had to pass through your UXG Pro, it would still be fine. But unless you've done something very weird, then your camera traffic is not even touching the UXG Pro anyway and it is just following the most direct route from each camera to your Blue Iris PC.

As for setting up a VLAN for your cameras to prevent them having internet access, that is still an option but you would be doing it for cybersecurity reasons, not for performance reasons.

Thank you for the response. This puts my mind at ease re: performance. I do want to prevent my cameras from having internet access, so I will continue with either a VLAN or individual camera settings to prevent access. I have not taken security seriously and do all the bad things (RDP into Blue Iris PC and using port forwarding). So, looking to fix that.

Much appreciated.