In that case, you might be able to use simpler and less expensive unmanaged switches.Įxactly how those devices implement VLANs is going to differ somewhat.
You could implement VLANs in your router or gateway or firewall, depending on your hardware. That might allow you to use a simpler router that doesn't need to understand how You could implement VLANs in your core switch for the house, maybe using Mikrotik or other managed switches that are VLAN-capable. You're building multiple virtual LANs and using them to separate the traffic. Personally, I'm still looking for someone who has decided to commercialize cameras based on the Raspberry Pi, so that I can buy a whole stack of them at once and I don't have to build them all myself. At that point, you might want to start looking at building your own on top of the Raspberry Pi plus their camera options. So, if you want to use hardware from a company that is not compromised like HikVision or Dahua, the options get much more limited. Next, you have the other companies like Wyze that take Dahua hardware and put their own firmware on it. Many more can be found at and among others. The next problem is that both these companies operate under a very wide array of brands, hundreds if not thousands of names, some of which you might recognize and may have thought that they were separate. The issue here is that HikVision is a Chinese company, and they have been widely known to supply equipment to the government to aid in the suppression of the Uighur people. You could also look for cameras that have an SD card slot built in, and configure recording directly on the camera. I use Milestone XProtect's free license at one site, and Synology's Surveillance Station at another.
If you want to record, you'll need to set up an NVR. I don't have any security concerns about them phoning home or doing anything nefarious, because they're completely segregated on their own locked down network.
I have a bunch of Hikvision cameras (DS-2CD2342WD-I) that were about $120/each that I'm happy with.
If you want remote access to the cameras while off your local network, you'll need to set up a VPN. It's definitely not plug-and-play, but if you have experience setting up networks it's pretty straightforward. Standard practice is to secure them by using a dedicated VLAN (so they can't talk to anything else on your network) and default deny firewall rules (so they can't get to the Internet or other parts of your network). They don't need any internet access to function. Once you step up from consumer level (Nest/Ring/Wyze) cameras, you'll find that nearly every IP camera supports the standard RTSP/ONVIF format.
0 kommentar(er)
