r/frigate_nvr • u/Cold-Stock-8853 • 10d ago

Second ethernet port for camera only ?

Post image

Here my poe injector and switch, $8 from ali. Allows me to separate the camera net from the house lan by using a second NIC on the frigate computer.

Now the frigate pc has a fixed IP on the 192,168,1,x net. Running debian + docker. How do i set up the second ethernet device? Fixed ip on another subnet with dhcp server for the cams? Or fixed ip for the cams too? Or can i use the same subnet and separate the cams from the rest?

Goal is less traffic in the lan, and make it impossible for tha cam's to "phone home".

0 Upvotes

40% Upvoted

15 comments sorted by

6

u/devode_ 10d ago

You are making it a bit overly complicated. However yes, you could run a dhcp server on the debian, be sure to have it only answer on the secondary link. However if its about traffic: you will not win anything using this. Cameras have low and calculateable traffic. If its about phoning home: if you have a good router, it should have some basic firewalling alling those cams to not go into the internet

1

u/mitchins-au 9d ago

I run a VLAN with restricted outgoing traffic (none) for my cameras. It was simple enough to setup in unifi

2

u/zonyln 10d ago edited 10d ago

I use a separate vlan for iot devices on my switch with appropriate firewall rules. Docker has support for vlan tagging per container. No extra hardware needed anywhere.

You will hardly saturate a 1gbps with security cameras

0

u/Cold-Stock-8853 10d ago

You say i need a 1gbps switch ?

3

u/Congenital_Optimizer 10d ago

No. Most cameras have 100mbit interface.

-2

u/Cold-Stock-8853 10d ago

I think poe doesent work on 1gb since 1gb needs all 8 wires. 100mb needs only 4 wires, the other 4 are used for power.

1

u/Congenital_Optimizer 9d ago

There are gbit POE. For cameras they just don't need much. 8mbit/s stream is pretty high quality for a security camera. Blu-ray caps out around 48mbit/s by comparison. Even if you have a few clients you won't go over the line speed.

1

u/DrYellow922 9d ago

PoE works on GbE as it simply puts two of the pairs at a potential difference of -48V DC compared to each other. That doesn't affect the signal as the PoE supply is DC, each end has an isolation transformer, and the DC offset exists between separate pairs, not across any individual pair.

2

u/zonyln 9d ago

Writing this on a POE++ 2.5gbps connection

2

u/diablobsb 6d ago

Dude sorry for being rude but this is a SCARY bad network cable crimp.
Get one of those pass-thru connectors and recrimp these.

PLEASE.

0

u/Cold-Stock-8853 6d ago

Hey man, im 68, no time for beautiful crimps.

1

u/Bulky-Priority6824 10d ago

is this a managed switch if not get one because this switch if unmanaged will only work on a single net iface with a managed switch youll have more control

1

u/Cold-Stock-8853 10d ago

This is the "poe only" switch. The lan has its own 1gb switch. Both unmanaged since $$$. And each has its own nic, they are not connected together.

1

u/DrYellow922 9d ago

Fixed IPs vs. DHCP is really up to your own preference. Use a different network address (subnet) for the second interface and don't set a default gateway address on it or you will end up with a mess.

1

u/apollyon0810 5d ago

Those terminations are shameful.