How to keep my security camera traffic off of my house ethernet when NVR is in a different location than cams?

[dissonance79]

Currently my NVR is across the house from my POE cameras which are attached to a switch. The NVR and switch are connected through my home ethernet. This results in a constant 120+ mbps of traffic going through my ethernet.

I'd really like the switch to connect straight to my NVR so the cam traffic isn't taking up bandwidth on my ethernet. I have a coaxial cable that goes from the switch area to the NVR area. I think I could use this to connect via MoCA. Is that right? If so, then my problem is that I'm not sure how I would connect my NVR to my router so that when I use my phone app, the NVR can send out the substreams for viewing.

Any ideas?

 

[bbunge]

One way would be to go from the PoE cam switch to another switch. This second switch would connect to the NVR and the router. This way all the cam traffic to the NVR would go switch to switch then NVR. Other LAN Ethernet traffic would not be bothered by the cam traffic and you would still have access to the NVR.
All my PoE cams and NVR are connected to a managed PoE switch. I have one other cam that connects to an 8 port switch that is connected to my router.
You can get a Netgear four port switch on Amazon for $15.00.

 

[dissonance79]

One way would be to go from the PoE cam switch to another switch. This second switch would connect to the NVR and the router. This way all the cam traffic to the NVR would go switch to switch then NVR. Other LAN Ethernet traffic would not be bothered by the cam traffic and you would still have access to the NVR.
All my PoE cams and NVR are connected to a managed PoE switch. I have one other cam that connects to an 8 port switch that is connected to my router.
You can get a Netgear four port switch on Amazon for $15.00.

Unmanaged switches (for PoE cams and the NVR) would achieve this? That would be great because when I upgrade to faster internet service, I didn't want the cam traffic slowing things down.

 

[degrub]

Unlikely to even notice 100-200 Mbit/s continuous traffic on a 1Gbit/s network based in the router switch. Maybe as a gamer you would see some latency build at the router. The switch moves packets for LAN to LAN at wire speed. Only if the traffic is going out/in to the WAN port does the traffic start to hurt.
Yes, the idea of keeping this traffic isolated on independent switches is better than using the switch in the router, particularly if you have APs running into the router switch. Otherwise, the router CPU should not be involved in LAN to LAN traffic and routing not affected.

 

[Tech9]

Currently my NVR is across the house from my POE cameras which are attached to a switch.

Move the NVR where the switch with cameras is. Problem solved and for free.

 

[dissonance79]

Unlikely to even notice 100-200 Mbit/s continuous traffic on a 1Gbit/s network based in the router switch. Maybe as a gamer you would see some latency build at the router. The switch moves packets for LAN to LAN at wire speed. Only if the traffic is going out/in to the WAN port does the traffic start to hurt.
Yes, the idea of keeping this traffic isolated on independent switches is better than using the switch in the router, particularly if you have APs running into the router switch. Otherwise, the router CPU should not be involved in LAN to LAN traffic and routing not affected.

Well my thought was that my cat 5 in the house has a max amount of data it can transfer at any one given time. If there is a constant 100-200 mbit/s of data going through the cat 5 for my cameras, then doesn't that mean the data for everything else is lowered by that 100-200 mbit/s?

 

[Tech9]

everything else is lowered by that 100-200 mbit/s

Not everything else. Whatever relies on this same cable going to the current NVR location.

 

[dissonance79]

Move the NVR where the switch with cameras is. Problem solved and for free.

They're separated because there is only an attic in the garage for running my camera wiring and the network panel is in my garage. The NVR is in the house for easy viewing on with a monitor. Also the garage isn't ideal for the NVR and monitor due to temperature, dust, etc. Looking past the temperature, dust, etc, I could put the NVR in the garage but I think it would be complicated to then have a viewing station in the house. Do you suggest this because running a straight MoCA line to the NVR with switches won't solve it?

 

[Tech9]

I can't suggest anything at this point. Draw a network diagram.

Network Diagram Tool - Free Online Network Diagram Maker

Easily create network diagrams, layouts and much more in minutes with SmartDraw. Anyone can make visual network drawings quickly.

www.smartdraw.com

 

[dissonance79]

Not everything else. Whatever relies on this same cable going to the current NVR location.

Well it's not an ideal setup due to the garage having the network panel. The garage is on the far end of the house and I have a wifi router located in a good central location in the house. So the modem and wifi router are in the center of the house > cat 5 line to garage panel > switch in garage panel, and then it goes to the rest of the house. So I think I would benefit from getting the camera traffic off of it? I believe this means that currently all cam traffic goes through cat 5 to my router and then to my NVR. Yeah I could go with a more complicated setup with access points but the wifi router hits everywhere I need it to. If I can fix this with a MoCA on a dedicated coax line from NVR to PoE camera switch then that seems good?

I can't suggest anything at this point. Draw a network diagram.

Network Diagram Tool - Free Online Network Diagram Maker

Easily create network diagrams, layouts and much more in minutes with SmartDraw. Anyone can make visual network drawings quickly.

www.smartdraw.com

Current:

 

[dissonance79]

Proposed:

 

[Tech9]

First diagram - only WAN-LAN traffic may be affected if >800Mbps.

Second diagram is better, but with additional MoCA expense. VLAN separated camera network is best.

 

[dissonance79]

According to first diagram only WAN-LAN traffic may be affected if >800Mbps.

Second diagram is better, but with additional MoCA expense. VLAN separated camera network is best.

Do you mean it's best to separate the cam network with a vlan from a network security perspective? I would still need the MoCA to separate the traffic to not limit a >800 mbps connection right?

Also, thanks.

 

[Tech9]

If your cameras are on the main network and some of them are placed outside - this is a potential point of entry.

 

[dissonance79]

If your cameras are on the main network and some of them are placed outside - this is a potential point of entry.

Which switch would I need to change to managed? The one by the nvr? My Asus router has some limited vlan capability that I haven't really explored too.

 

[Tech9]

Most NVRs have separated by default camera and management interfaces. You have to connect the camera PoE switch to the camera interface and the management interface to your network.

 

[dissonance79]

Most NVRs have separated by default camera and management interfaces. You have to connect the camera PoE switch to the camera interface and the management interface to your network.

This one just has a single ethernet port on the back.

 

[degrub]

If you have the RG6 already in place, just grab a pair of MOCA 2.5 modems and install as shown in your diagram. If you have other cameras, you will have to set up same for them or resort to VLANs and change out some of the gear if the switches don't support assigning VLAN to ports (layer 2.5 or layer2+ ) and replace the router with a SMB router that has built in VLAN support. Alternatively, you could just add a layer 3 managed switch instead of replacing the router and replace any switch that doesn't support VLANs at least at layer 2.5/2+

Long term you want to either commit to physical isolation of camera system or VLAN based hardware.