Hi  @ndesilva 

Thanks for your feedback regarding our VIGI security products.

The original design intention of the VIGI NVR is to store more videos and centrally manage multiple network cameras (IPCs), while also providing power and network access to compatible PoE cameras. 

NVR1008H-8P is one of our earliest NVR products，and it does not have a built-in DHCP server on the PoE port side, unlike some of our newer models currently available.

We have successively launched multiple NVR products, such as VIGI NVR1108H-W that support independent DHCP services on PoE ports to meet users’ needs for more flexible network configuration.

Regarding network security considerations, we fully agree with your insight into the importance of isolating security networks. In actual deployment, if you wish to place the NVR and cameras in an independent subnet, you can still achieve logical isolation between the camera network and the main business network by using a router or a Layer 3 switch to create VLANs or configure ACL policies, thereby ensuring the security and privacy of the surveillance system.

If you are currently using models such as the 1008H, we recommend the following methods to further enhance network security:

1. Set the cameras connected to the NVR’s PoE ports to use manual IP addresses and plan an IP address range different from that of the local area network.
2. Use a router or switch with VLAN functionality to isolate the NVR’s uplink port.
3. If conditions permit, you may also consider upgrading to the newer NVR model VIGI NVR1108H-W.

Once again, thank you for your professional and detailed feedback, which is crucial for our continuous product optimization. If you have any other technical questions or upgrade needs, please feel free to contact the TP-LINK technical support team. We are always ready to provide further assistance.

Hi  @ndesilva 

Understand. We respect your choice.