VLans
VLans
Set up VLANs can be tricky, especially if you're not sure about the router settings. You likely won't need to change much on your router itself—just configure the VLANs through your network device or router's interface. Your router might already support VLANs, but it’s important to verify that. For a 5-port level 3 switch, you can use models like MicroTik or similar devices without needing a server for routing software. Just ensure the switch is properly configured with the correct VLAN IDs and access controls.
On a network switch, the typical approach when setting up VLANs is to install a Trunk Port that connects back to the router. This trunk port allows all VLAN traffic to pass through it. You then configure sub-interfaces on the router to isolate each VLAN, preventing them from communicating directly with one another via the router.
To direct traffic between VLANs, you require a router or an L3 switch. The optimal method is using an L3 switch since it handles routing without needing additional hardware. Alternatively, a router can be connected via a trunk port between the switch and the router (often called a router on a stick). However, I suggest pairing an L3 switch with a firewall such as a Cisco ASA or Fortigate.
Consider upgrading to a router with better speed and security features, and pair it with a reliable switch for stable connectivity.
I don’t have much experience suggesting routers with useful features such as sub-interfaces. The only one that comes to mind quickly is the CISCO 1941, but you probably shouldn’t consider it. Most setup will happen through the console. For switches, I prefer Ubiquiti’s gear, especially their Edge Series. They’re a bit pricier but include a web interface.
Only a small amount is needed on your network, making the most affordable yet top choice ideal for you.
If you're looking for affordability, consider the Ubiquiti UDM Pro. It includes an 8-port switch out of the box. Note it doesn't support PoE, so you might need a PoE switch or power injectors for your cameras. For networking, the UAP-AC-LR is a good option.