Is it mandatory to assign VLAN to a port ?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Is it mandatory to assign VLAN to a port ?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Is it mandatory to assign VLAN to a port ?
Is it mandatory to assign VLAN to a port ?
2024-03-08 12:43:22 - last edited 2024-03-10 18:28:32
Model: TL-SG2428P  
Hardware Version: V5
Firmware Version: 5.20

Hi,

I wish to add Hikvision 8 POE port NVR (with 4 cameras) to my Omada setup(ER605, SG2428P, OC200).

A dedicated "CAM" vlan was created for that (192.168.20.1/24).

My goal is to connect all 4 cameras(192.168.20.11......14) to the NVR (192.168.20.10).

 

* NVR is connected directly to port16 at the switch. Port is defined to CAM vlan. success.

* Exactly the same, for camera on port 14. success.

* While Camera was connected to switch - it was defined and worked OK on NVR.

* Camera can be accessed directly from web browser `http://192.168.20.11`

 

When camera was connected to NVR's port (although it is static IP on CAM vlan), it was not discovered by NVR, or via web browser.

As if it could only belong to CAM vlan on assigned ports that were defined to CAM, but when it was moved to NVR, the correct IP was not obtained.

 

I wish to populate ports on NVR rather than the switch's.

Is there a way for my desired topology ? (when using vlan)

Can I bind a Mac address to a IP including vlan ( rather that assigning a port ) ?

 

Guy

 

 

  0      
  0      
#1
Options
2 Accepted Solutions
Re:Is it mandatory to assign VLAN to a port ?-Solution
2024-03-08 13:57:30 - last edited 2024-03-11 02:15:33

  @guyd2 

 

You should be able to make it work, but that is a Hikvision issue, not TP-Link. If you already can access the NVR from the network, I don’t think there is anything more that needs to be done on the TP-Link side. That NVR comes with its own switch and probably requires some initial configuration for it. I’m not sure if there is any Hikvision NVR expert here.

Kris K
Recommended Solution
  1  
  1  
#2
Options
Re:Is it mandatory to assign VLAN to a port ?-Solution
2024-03-09 13:40:28 - last edited 2024-03-10 18:28:32

  @guyd2 

 

Yes, it is Hikvision issue (cams should be at 192.168.254.x), regardless your IP.

 

Solved

Guy

Recommended Solution
  0  
  0  
#4
Options
4 Reply
Re:Is it mandatory to assign VLAN to a port ?-Solution
2024-03-08 13:57:30 - last edited 2024-03-11 02:15:33

  @guyd2 

 

You should be able to make it work, but that is a Hikvision issue, not TP-Link. If you already can access the NVR from the network, I don’t think there is anything more that needs to be done on the TP-Link side. That NVR comes with its own switch and probably requires some initial configuration for it. I’m not sure if there is any Hikvision NVR expert here.

Kris K
Recommended Solution
  1  
  1  
#2
Options
Re:Is it mandatory to assign VLAN to a port ?
2024-03-08 14:26:57

  @KJK 

 

As a quick test - I took a simple 4 port switch ( as the role of NVR ) connected it to Omada's port12 (and assigned it to CAM).

Camera was powered using external 12V (since it is not POE now)... and surprisingly , I get the desired IP address, 192.168.20.12.

 

A) I think what you've raised it correct. What can I do now ?

B) I would be happy not to assign a port to CAM since all ports are tagged as CAM

 

Guy

  0  
  0  
#3
Options
Re:Is it mandatory to assign VLAN to a port ?-Solution
2024-03-09 13:40:28 - last edited 2024-03-10 18:28:32

  @guyd2 

 

Yes, it is Hikvision issue (cams should be at 192.168.254.x), regardless your IP.

 

Solved

Guy

Recommended Solution
  0  
  0  
#4
Options
Re:Is it mandatory to assign VLAN to a port ?
2024-03-18 13:00:08 - last edited 2024-03-19 08:02:01

  @guyd2

1. Create VLAN 20 (CAM), create DHCP assignment for your NVR, plug into tp-link switch port and change that port from 'All' to 'CAM'. This is because nearly all of the Hikvision NVR's and Cameras are NOT VLAN aware, and thus we have to configure 'port based VLANs'. From what you say, this has already been correctly done.

 

2. The default network for the PoE ports of the NVR are on the 192.168.254.1 / 24 subnet, so if you are connecting the cams directly to the NVR PoE ports, then I suggest you use Hikvision's SADP to to give them a STATIC IP of 192.168.254.2 ....5 (the .1 is reserved for the NVR internal gateway). If you cannot see the cams when using the SADP tool, then reset them using the button on the camera and try again. The camera's default IP on reset is normally 192.168.1.64, so if you still can't see them, then TEMPORARILY change your computer IP4 address to be on the same ',1' subnet e.g. change your computers IP4 address to 192.168.1.100. Try the SADP tool again. When done, change back your computers IP4 address setting to what they were originally.

 

3. Plug the cams into NVR ports 1 to 4 going from 192.168.254.2 to 5. Open up the UI for the NVR and check cams are able to be viewed, you might have to select the correct video stream to view on the UI.

 

4. To acess the cams across PC's or other devices, you can either use a) the NVR GUI or b) install iVMS-4200 or c) access individual cameras via the correct port number (see point 5 below)

 

5. To optionally access the individual cameras, you will need to enable the 'Virtual Host' on the NVR via 'Device Access > Device > Video Device > .... More >  Virtual Host Configuration' and enable 'Virtual Host'. You will now see links in the 'Connect' column and you can click on these to view / configure each camera individually. You don't have to go via the NVR UI - just copy the link and paste into a browser, and save a bookmark.

 

6. A further note, if you are insistent that the cameras go via the PoE ports and some/all of your cameras are NOT plugged directly into the rear of your NVR but go via a tp-link switch(es), then there may be further network config to do as the cams are not VLAN aware. We need to create a 254 vlan (NOT interface) as part of the tp-link wired network (on switches only, not gateway) and implement switch port changes to use the 254 vlan i.e. implement port based vlan 254. All of the above (point 6) isn't absolutely necessary if ports are set to 'All' but it makes it easier for us to isolate the vlan with rules. There is a more elegant solution, where the camera doesn't need to end up referencing the rear PoE ports but can sit on your CAM vlan and connect to your NVR but that it the subject for a different discussion.

 

7. Don't forget that tp-link's Omada setup allows crosstalk between vlans by default - so if you want to isolate your vlans, then you'll need to implements some switch ACL rules, not only to stop inter-vlan communication but also to allow the IP of any management PC's/phones/tablets to traverse across vlans, for NVR access.

 

Hope this helps. I'm traveling for the next 4 days, so won't get an opportunity to respond to any further questions until I arrive back on land.

  2  
  2  
#5
Options