NVR internal switch question

Before I buy a NVR, I would like to know how the internal switch works.

Is the NVR running it's own internal DHCP server to assign IP addresses to connected cameras?

Is this a different IP segement, not the same as the connected router?

For security reasons, you don't want if someone pulls a camera of the wall and put the ethernet cable into it's laptop, you're on the internal LAN.

In other words, a seperate VLAN for the NVR internal switch is recommended.

How does this work with the Reolink NVR?

BASW,

This is how the Reolink product works.

As long as the cameras are plugged into the back of the NVR, they are on a 172 subnet, but if you have IP cameras on the local lan, they receive an IP from your network. Any of the hardwired units will be put on a different VLAN/Subnet from your internal LAN. I'm unsure of how the product routes or any protections to secure the 172 addresses from your internal lan stay secure from one another.

Thx. It's correct I only want to connect IP cams to the NVR. (Not on the local LAN.)

If I connect my router, like the attached picture shows, is that possible?

Will the LAN port on the NVR route between the two different networks?
nvr-router.png

It does not allow me to reach the 172 network without using the NVR (which gets a local DHCP or static network address on your lan via the LAN port. The NVR allows you to view and configure the cameras so you do not need to access them directly via the 172 network. You are able to use the software clients to connect to the NVR remotely and do any maint. or configuration without needing to be at the physical NVR device which is a great system. So I do not think you have the ability to "route" between the two LANs, but this is not required as you can do it all around the NVR.

Perfect, thx for the clarification!

This implies that, if anyone can get their hands on a IP cam ethernet cable, they are contained inside the 172.16.x.x network.

A bit more secure compared to IP cams directly connected to the router. (The internal LAN, with personal file shares and so on...)