How to safely separate IP cameras on a network but still get access via the NVR

[Sunnydays]

i need some help trying to properly separate my IP cameras from main network.

My home network is using a router with 192.168.1.0/24

i have a l2/l3 switch attached to this router, and have created a vlan (vlan30 192.168.30.0/24, ports 5-10). ports 1-4 i would like to keep on my home network. I have placed all my ip cameras within vlan30. however i am having trouble with the NVR, where to put it and how to configure it. I have already put the NVR on port 2 (home network). If i set the default gateway as 192.168.1.1 (home network router), i can sucsefully get the NVR on the home network but can't see any of the cameras on vlan30). if i put use 192.168.30.1 (vlan30 ip) as the default gateway, i can see the cameras, but can't get onto the home network?

this is very frustrating? any idea on how i can properly configure this?

 

[Phil]

Hi,
Take a look at this guide/explanation from SmallNetBuilder, hopefully it will help:

VLAN How To: Segmenting a small LAN - SmallNetBuilder

 

[FireBIade]

Sounds like you need some static routes added to your switch to switch traffic between vlan 30 and the default vlan 0