“Draw an IP CCTV network from the Internet through a perimeter firewall and core switch to two PoE switches on camera VLAN 20, three cameras in 192.168.20.0/24, an NVR, and a guard station.”
Read the decisions behind it.
The three cameras and both PoE switches are grouped in 192.168.20.0/24.
Internet traffic reaches the CCTV environment through the perimeter firewall before the core switch.
PoE Switch A powers the lobby dome and gate PTZ, while PoE Switch B powers the dock bullet camera.
The NVR and guard-station monitor connect to the core switch rather than directly to cameras.
Use this topology when documenting a small IP-CCTV deployment with a dedicated camera VLAN, PoE access switches, centralized recording, and a local monitoring position.
Other examples in this family.
Common questions
Why are the cameras on 192.168.20.0/24?
A dedicated camera subnet separates CCTV traffic from other devices and gives firewall rules a clear boundary.
What does PoE mean on the camera links?
Power over Ethernet carries network data and camera power on one cable; the switch must have sufficient PoE budget.
Why is the NVR connected to the core switch?
The NVR can record streams from both PoE switches through the core, instead of requiring a direct connection to each camera.
Is a 1 Gb/s camera-switch uplink always sufficient?
It depends on the combined camera bitrate, overhead, and headroom. Sum peak streams and verify the uplink and NVR interfaces.