
A VLAN (virtual LAN) splits one physical network into separate logical networks. Putting CCTV, access control, office PCs and guest Wi-Fi in different VLANs stops heavy camera traffic slowing the office, and stops a compromised laptop or guest device reaching the cameras.
Key takeaways
- VLANs separate traffic on the same switches.
- CCTV traffic stays off the office network.
- Guests can't reach cameras or controllers.
- Needs managed switches and planning.
- Alternative for small sites: physically separate switches.
01The idea
02Why it matters
- Dozens of camera streams can saturate a shared network
- Cameras and recorders often run older firmware: keep them away from guests
- Faults are easier to isolate
- Access rules decide who can view the recorder
03What's needed
- Managed switches that support VLANs
- A router or firewall to control traffic between VLANs
- An addressing plan
- Documentation, so the next technician understands it
See IP addressing basics.
04Frequently asked questions
Do I need VLANs for CCTV?
Not always. Small systems can use a separate switch or the NVR's own PoE ports. Larger or shared networks benefit from VLANs.
Can I use VLANs on any switch?
No, you need managed (or smart-managed) switches that support VLANs.
Will VLANs stop me viewing CCTV on my phone?
No. Remote viewing is set up through the router; VLANs just control what can reach the cameras internally.


