How To Secure Your Camera Network Using A Vlan

Today's video is about isolating IP security camera network onto their own network VLAN and protecting yourself and your family against constant vulnerabilities. Regardless of what type of cameras, NVRs, or software you are using, keeping them isolated and away from your main LAN is very important. Built-in vulnerabilities, poor support, and lack of updates from camera vendors can put your network at risk. Isolating your camera network onto it's own a VLAN can help protect your data as well as protect your network.
Tailscale Videos:
Tailscale overview. • Tailscale - A Powerful...
Exit Node with Tailscale: • Tailscale Exit Node - ...
Tailscale Subnet Router Setup: • Tailscale Subnet Route...
Tailscale Subnet Router on Windows: • Tailscale Subnet Route...
NSA Best Practice for Home Networks: • NSA Releases Best Prac...

[@Polkster13]

You should also create a rule that Drops Invalid State after your Established and Related rule.

[@MikeFaucher]

Great point, thanks.

[@JohnMcclaned]

Fantastic video! I'm aiming to accomplish a similar setup with an OpenWrt router and Tailscale. My goal is to have Reolink cameras isolated from internet access to prevent unauthorised remote viewing, while still being able to access this private network remotely via Tailscale (installed on the OpenWrt router with subnet routing). I'm less concerned about the cameras talking to other devices on the same router as I have a dedicated router they are on. I want to ensure the cameras cannot communicate with Reolink servers or leak data online. Do you have any suggestions on how to achieve this? Thanks!

[@MikeFaucher]

Just add. a Tailscale router and block the IP of your cameras, and it will work for you.

[@168Matches]

Hey thanks for the info!
Any concern with amcrest cameras being made in china? And do u have any other camera brand recommendations (preferably ones not made in china)

[@MikeFaucher]

Great question. It's no concern if it's on a VLAN and controlled by something like Blue Iris, which I did a couple of videos on. Since the video, I have switched all of my security cameras to UniFi for a bunch of reasons, such as simplicity, ease of setup, and tight integration with my network. However, as long as you do not allow external communication and control it on-premises or through a VPN, you should be fine.

[@corstafine]

All I want is a non sub system so my old mum can see who's at her door. One that can either link to her tv or phone or perma monitor. Years ago I used a cctv system on my shop that didn't have WiFi, didn't need updates or bloody firmware. It was just a camera that showed recordable footage... It's like we've gone too techy to the point of backwards nonsecure systems.

[@MikeFaucher]

Good point, you are right sometimes we want something simple without accounts.

[@TurtleMatey]

Thanks for the video. Do you still block the cameras from the Internet as well?

[@MikeFaucher]

It not as necessary on a VLAN as they can't get to much so as long as everything is on a VLAN you should be OK.

[@pbrigham]

Great video Mike, thanks for sharing.

[@MikeFaucher]

Thank you. Appreciate it.