Help me build my home network: Managed Switches + Load Balancer + CCTV

[Kloud]

@yugaaa

Which location are you from ? If you are fine with shipping , I can give you contact in Chennai and Blr .

Pune. Not spending more than 10k on a switch.

[Kloud]

How about this single switch to rule them all?

Omada 16-Port Gigabit Smart Switch with 2 SFP Slots

No need to get me 2 managed switches plus another poe switch for ip cameras (I’ll use cheap poe injectors for them).

I think it supports most of the managed functions needed.

Goes around for 8k.

[yugaaa]

@Kloud

What are the pros of using a used enterprise switch over, let’s say, a new L2 managed consumer switch?

Do I need a PhD in networking for configuring an enterprise switch?

Reliability . Plus a hell a lot of features . If you have some basic knowledge of vlan you can do it . Cisco documentation is also quite good with many forums .

[reborn]

Oops, didn’t notice the VLAN C. In any case, I think a smart switch is enough for your case. TP-Link TL-SG1016PE has both VLAN tagging and POE, and is 8k.

@Kloud

I need to cut off the internet for IP cameras for safety reasons while keeping it on for the NVR.

The doorbell will have internet access, but it will be on its own VLAN, isolated from the internal network for security purposes.

If I configure vlan from the load balancer, it won’t have control over the ports of unmanaged switches.

I think this can be done at the router - you don’t need to a separate VLAN for this. A VLAN for a single device is overkill. Combine B and C into one VLAN B. VLAN B doesn’t have access to internet by default, but the NVR and the IP Cam (within VLAN B) has access to internet. Also, your VLAN A can initiate access to VLAN B, but VLAN B cannot initiate access to VLAN A. In fact it may be be better to move the NVR to VLAN A.

I know this is possible on PfSense and Unifi, so should be possible on Omada firewall too. Here a good video on how to set it up for Unifi (doesn’t help you directly, but explains the concept)

Just talking about vlan, I think anyone can break into any vlan they like with a static IP address; that’s not safe.

Don’t think so, as VLANs are layer 2 while IP is layer 3. What type of attack vector are you considering? Maybe someone overwrote the firmware of your IP Cams to impersonate the MAC of your NVR?

[Kloud]

@reborn

Don’t think so, as VLANs are layer 2 while IP is layer 3. What type of attack vector are you considering?

Sorry for the late reply.

Think of spoofing the IP and mac address and making the router believe that the device belongs to some different vlan.