Zoneminder and Camera on same VLAN or separate VLAN?

[trumee]

Hello,

I have the camera's on a separate VLAN than Zoneminder. The downside to this approach is that all the traffic is routed via my router. Security wise this seems like a good idea though.

I am curious, what is the recommended approach
- ZM and Camera on the same VLAN
- ZM and Camera on separate VLAN

Thanks

[Magic919]

I think it’s pointless complication, so I don’t do it at home.

[alabamatoy]

I didnt use VLAN, I used a dumb switch (hub) and a second NIC on the ZM box. With no packet forwarding between the NICs on the server, and the server doling out DHCP to the backside NIC (so I can add a new camera and have it work without fiddling with addresses) it works well. None of the cameras are accessible from the Internet, and cannot access the Internet, all on private IP space. This would also eliminate the heavy load on a SOHO router for managing a VLAN.

[Andyrh]

10 people in the room, at least 12 ways...

I blocked my cameras from talking to the internet at the firewall.
This allows me to see the cameras directly with the app while local or with Zoneminder local or remote.