With all the talk of security vulnerabilities recently and the suggestion of a vlan giving better security I have a few questions

1. How difficult are they to set up

2. Can things on different vlans see each other ie if I have a nvr on one vlan, ip phone system on another and pc,s on another can the pc log onto the nvr etc or does that defeat the object

Any help/advice gratefully received

It all depends on how competent you are at that stuff really.

You will find it's only available on top end enterprise routers, if your using a router to do it.

 

The whole point of a VLAN (Virtual LAN) is to isolate the LAN into sections, so yes that wouldn't work on the LAN side.

You can do a basic vlan via a managed switch, tplink smart switch is quite easy to setup, the connection between them however is a bit more involved.

The point of a VLAN is to make it like there are physically separate networks running. You then use the routing/firewall to allow certain traffic between the two.

 

They add a lot of security if you set the firewall up correctly, and make a lot of attacks a lot harder. You can make it so that a PC on the general VLAN can access a DVR on the the security VLAN. But the DVR wouldn't be able to access the rest of the network, so damage would be limited.

 

Even if you allow all traffic between two VLANS, it makes an attackers life harder as a number of attacks assume the DVR is on the same local network segment.

Newer models of routers have guest networks on the wifi, mine doesnt allow me to see my servers when I log into the guest wifi so I guess this is a easy way of setting up a vlan or am I wrong

Newer models of routers have guest networks on the wifi, mine doesnt allow me to see my servers when I log into the guest wifi so I guess this is a easy way of setting up a vlan or am I wrong

Technically, it's not a VLAN, but essentially it is the same idea. It's another network that is firewalled off.

Normally that functionality lets the trusted network access the guest network, so putting security devices on there could be wise. Good idea.

Technically, it's not a VLAN, but essentially it is the same idea. It's another network that is firewalled off.

Normally that functionality lets the trusted network access the guest network, so putting security devices on there could be wise. Good idea.

I have an idea it may be wifi only and not restricted on the lan, ill take a look and let people know

I was right wireless only I could put a wireless network card on my dvr and connect it to the guest network I suppose

Pretty sure my new Vigor vdsl router has this, very much seems the way forward...

I have a couple of routers that do this, both have dual band and a guest network.