2
A church & school that share a building have until now "co-existed" from a networking perspective... one ISP, one firewall/UTM, but generally have had separate L2 switches & end-user devices. We need to separate. A second ISP connection and a second firewall have been deployed. I'm now trying to restore the ability to share certain things... in this case, our IP-based video security system.
The security system consists of... 2 stacked Cisco POE switches (one in main bldg, one in gym - connected by fiber - running in L2 mode), 32 IP cameras connected to and powered by the switches, and a QNAP NAS-based NVR with 4 network adaptors.
If users/devices on both networks need to access the NVR for monitoring security, what is the optimal setup? So far I have kept the security switch in L2 and connected to the church's firewall (set as default gateway), but then have a connection from the school's firewall to one of the network adaptors on the NVR.
Ideally I would like to use the switch in the gym (that is part of the security system) for more than just security cameras... especially for extending the church and school wifi coverage. Based on what I've been reading it seems I may need to change the security switches to L3 and do some port configuration to make this happen.
Would really appreciate some advice on this.
3I would set the security system, the church, and the school each on their own separate subnet. Then grant access as needed (church to security system) and (school to security system) but dont allow (church to school). If there are file shares then set them up individually. Make sure all three groups are numbered differently. – Larryc – 2019-12-30T16:40:31.390
looks like the USG 210 has two WAN ports, There you go... – Larryc – 2019-12-30T16:51:34.707
both USGs have two WAN ports, and both use WAN1 for the ISP connection. are you suggesting that I connect them to each other, or to the security switch? I'm just a self-taught volunteer when it comes to this. – Administrator Account – 2019-12-30T22:16:40.920