Stop CCTV access the internet - ACL

Stop CCTV access the internet - ACL

Stop CCTV access the internet - ACL
Stop CCTV access the internet - ACL
2025-08-19 12:37:57 - last edited 2025-08-20 01:14:47
Tags: #ACL
Model: ER707-M2  
Hardware Version: V1
Firmware Version: 1.2.3

How do I ensure my cctv cameras from accessing the internet. 

I know i have to create a vlan and assign devices IP to the vlan as some are powered by unmanaged switches.

Then I would use ACL Rules, but this is where I am stuck. I dont know what protcols to use and rules source/ destination etc.

  0      
  0      
#1
Options
1 Accepted Solution
Re:Stop CCTV access the internet - ACL-Solution
2025-08-20 01:14:38 - last edited 2025-08-20 01:14:47

  @Deeps530 

You don't need them to connect Internet at all?

You can set up the GW ACL and block the CCTV VLAN interface from any network.

Or you can use SW ACL to do the same. 

 

ACL Guide Compilation

Recommended Solution
  1  
  1  
#2
Options
4 Reply
Re:Stop CCTV access the internet - ACL-Solution
2025-08-20 01:14:38 - last edited 2025-08-20 01:14:47

  @Deeps530 

You don't need them to connect Internet at all?

You can set up the GW ACL and block the CCTV VLAN interface from any network.

Or you can use SW ACL to do the same. 

 

ACL Guide Compilation

Recommended Solution
  1  
  1  
#2
Options
Re:Stop CCTV access the internet - ACL
2025-08-20 05:54:21

  @Clive_A  No the Ip camers connect to the DVR.

The DVR will need access to the internet. 

 

Ill try it out. 

  0  
  0  
#3
Options
Re:Stop CCTV access the internet - ACL
2025-08-20 06:04:30

  @Deeps530 

Deeps530 wrote

  @Clive_A  No the Ip camers connect to the DVR.

The DVR will need access to the internet. 

 

Ill try it out. 

Granular ACL requires the switch. 

You can create the IP group and add each IP address of the camera to this group. 

Then fine-tune the ACL per your needs. 

  0  
  0  
#4
Options
Re:Stop CCTV access the internet - ACL
2025-08-20 06:07:14
Thanks I think that will work better as the dvr will need access to the internet. Only the IP cameras will be added to the group and not the DVR
  0  
  0  
#5
Options