Safe Port Forwarding for Cameras

[Crussell (Chris)]

Here is a link to how I have my network set up that I posted in another topic roughly on same lines as this, it should help.

SmartThings and VLANs

This is how my whole network is setup, ST, servers, laptops, tvs, etc. Depending on your level of paranoia, use an AP that has multiple SSIDs mapped to separate VLANs. Then with a firewall or access lists, you can control what each VLAN has access to, then you need to break the devices into classes of connectivity: Need just a constant "cloud" connection to work properly Need no connection except for initial config/updates, need local connection Need both a cloud connection and a local connection to work If you have a class of devices that are truly cloud-based (i.e. they don’t use any local traffic, it all must go out to the internet and back) creating a SSID and VLAN that segregates traffic is a simple measure to make sure that any hostile activity it might be repurposed for is shelte…

It goes into a little more detail but a lot safer than port forwarding… especially with Foscam cameras which can be vulnerable and used as an in into the rest of your network

Basically you want to compartmentalize your cameras, IoT devices, and rest of network.