Non VLAN to VLAN move - No traffic flow between Cameras and NVR?

[remeniz]

I currently have the NVR and Cameras all on a 192.168.50.0/24 network. And it all works. I have recently set up VLANs on the network, which all work fine. DHCP handed out and devices connecting to the different VLANs with no issues.

The last part is to move the CCTV system. When moved to VLAN 20, the cameras and NVR get the relevant IP's from the 192.168.20.0/24 network, all show connected in iVMS-4200, I can navigate to the NVR and cameras in a browser using VLAN 20 IP's. But there is ZERO traffic flow from cameras to NVR. Hence, the Hik-Connect app is not showing any cameras. I'm treating the NVR and cameras as VLAN unaware devices in the switch they are connected to.

I revert the move, back to 192.168.50.0/24 network, and all works fine.

What could possibly be the issue?

Any help appreciated.

 

[David]

I currently have the NVR and Cameras all on a 192.168.50.0/24 network. And it all works. I have recently set up VLANs on the network, which all work fine. DHCP handed out and devices connecting to the different VLANs with no issues.

The last part is to move the CCTV system. When moved to VLAN 20, the cameras and NVR get the relevant IP's from the 192.168.20.0/24 network, all show connected in iVMS-4200, I can navigate to the NVR and cameras in a browser using VLAN 20 IP's. But there is ZERO traffic flow from cameras to NVR. Hence, the Hik-Connect app is not showing any cameras. I'm treating the NVR and cameras as VLAN unaware devices in the switch they are connected to.

I revert the move, back to 192.168.50.0/24 network, and all works fine.

What could possibly be the issue?

Any help appreciated.

are the relevant ports open and traffic allowed between LAN and VLAN?

David

 

[remeniz]

The LAN which is the 192.168.50.0/24 network, soon to be redundant because everything is on VLANs now, has all ports open for traffic. And with my phone on a VLAN network I can access the system while it's on the old network.

I have media servers up and running and all sorts of other gear with no issues, all with inter VLAN routing working, and finding each other on the same VLAN network as they should. As an example, I have 4 TV tuners, all on a VLAN that have to stream to a server that runs the TV system, it works fine.

But with this system on the VLAN 20, which has other gear running fine, the cameras and NVR just don't want to know each other.

 

[remeniz]

The switch is a MikroTik CRS328-24P-4S.

 

[David]

The switch is a MikroTik CRS328-24P-4S.

is the switch managing your LAN and VLAN?

Could you post a screenshot of the VLAN setup page and post the router model number? NVR and camera info would be good.

are there any error messages or codes from the NVR and / or cameras?

are you familiar with the OSI 7 layer model for networking?

David

 

[sportster]

L3 switches do a nice job of isolating traffic. My guess is something pretty basic is mis-configured. To compliment what David asked, I'd suggest:

• plug a laptop with the SADP tool into VLAN 20 and confirm all your VLAN 20 devices have the correct IP address / range / gateway.

If you're still left struggling for answers, then:

• mirror VLAN 20 onto a dedicated switch port, plug a laptop with the Wireshark tool into that port & trace all packets flowing on VLAN 20. If you filter (within Wireshark) on ARP & DHCP packets it should provide a clue as to why the cameras and NVR aren't hooking up.

BTW, what model of NVR ? And, I'll assume you're using DHCP Reservations in your DHCP Server. Correct ?

You did re-configure the NVR to add the 192.168.20.xxx cameras into the NVR when you moved to VLAN 20 ? (sorry, I know it's a very basic question, but I had to ask).

 

[remeniz]

I am thinking its a misconfiguration somewhere as well...

NVR model - DS-7616NXI-I2/S.

DHCP and routing is done on a MikroTik RB4011. NVR and cameras are just some of the devices that I have set static IP's for. And NVR and cameras pick up these VLAN 20 IP's fine. As previusly stated, I can log into the NVR and cameras on VLAN 20 via a browser, while on VLAN 20.

But NVR <> Camera communication is dead????

VLAN 20 is a mirror setting of VLAN 99 for example. VLAN 99 has a server running Emby and Channels services that rely on HDHomeRun tuners to issue streams to the server on request; all on the same VLAN 99 and communicate with eachother fine.

I'll do the recommended tests and see what I find.

 

[David]

NVR and cameras are just some of the devices that I have set static IP's for.

How did you assign the static IP addresses? I usually use DHCP MAC binding on the router for fixed IP’s and keep DHCP enabled on all devices. It makes router fail recovery a bit easier. Router backups help as well

 

[sportster]

Just a heads up on the SADP tool.....when working with an NVR with 2 LAN adapters:

• for me (with a DS-7616NI-M2) the SADP tool reports the MAC address of the LAN 1 card, no matter what card (LAN 1 or LAN 2) is plugged into the network I'm testing.

My gut says, the SADP tool is mis-interpreting some config info retrieved from the NVR vs interrogating the MAC address directly.

And I've verified the accuracy of what I've stated by looking at Wireshark info & the ARP tables from my cameras.

Of course, your results may vary. (anyway, just be cautious of that NVR MAC address reported by SADP. All other SADP info should be ok).

 

[David]

Just a heads up on the SADP tool.....when working with an NVR with 2 LAN adapters:

• for me (with a DS-7616NI-M2) the SADP tool reports the MAC address of the LAN 1 card, no matter what card (LAN 1 or LAN 2) is plugged into the network I'm testing.

My gut says, the SADP tool is mis-interpreting some config info retrieved from the NVR vs interrogating the MAC address directly.

And I've verified the accuracy of what I've stated by looking at Wireshark info & the ARP tables from my cameras.

Of course, your results may vary. (anyway, just be cautious of that NVR MAC address reported by SADP. All other SADP info should be ok).

I wonder if the 2 NVR LAN ports are like a layer 1 hub with the MAC coming from the NVR? Or some layer 1/2 hybrid.

Some devices don’t like VLAN tagging.

David