I have a network that consists of 3 VLANs:
- 1 -> Desktops and Laptops
- 50 -> IP Cameras
- 200 -> Servers
Just to make this simple, treat all devices in a VLAN the same:
- 1 is a member of 200, as computers here need to talk to Servers
- 50 is a member of 200, as the IP Cameras stream to a NAS
- 200 is a member of 50, as the NAS controls attributes of the cameras
200 is a member of 1, as the servers and computers talk to each other
VLAN 1 <---------> VLAN 200 <---------> VLAN 50
All devices have an IP of 10.1.1.x
(x
is device dependent)
In this configuration, the primary goal of having IP Cameras in a separate VLAN is so that this traffic is not seen by the desktops and laptops in VLAN 1. This works fine, however, when the NAS sends an ACK for the IP Camera traffic, and because its port on the switch is mapped to VLAN 200, devices on VLAN 1 (bad) and VLAN 50 (good) are seeing the same packets. Because this is IP Camera related, I would prefer that this traffic only to VLAN 50 (e.g. 200 -> 50 and not 200 -> 1)
How can I get traffic from VLAN 200 devices to route to the VLAN they are intended for?
I'm hoping for a solution that doesn't require a dedicated router and my switch is a Netgear GS108T, but if necessary upgrading a step to something like a Netgear M4100 or even to an Enterprise class switch is not an issue - I am just looking for the best configuration right now.