CCTV Networking & Infrastructure

In an IP CCTV system, the network carries every frame of video from every camera to every recording server, storage device, and operator screen. A poorly designed network will undermine even the most expensive cameras — causing dropped frames, choppy playback, recording gaps, and vulnerability to cyberattack. A well-designed network, on the other hand, ensures reliable 24/7 recording, smooth live viewing, fast playback, and protection against both physical and cyber threats.

1. Network Fundamentals for CCTV

An IP CCTV system is, at its core, a local area network (LAN) with specialised devices. Understanding a few fundamental concepts helps facility managers communicate effectively with IT teams and evaluate vendor proposals.

IP Addressing

Every IP camera, switch, server, and workstation on the CCTV network has a unique IP address — its identity on the network. CCTV systems typically use private IP address ranges (e.g., 10.10.x.x or 192.168.x.x) that are not routable on the public internet. Addresses are assigned either statically (manually configured on each device — preferred for cameras because the address never changes) or dynamically via DHCP (simpler to deploy but can cause issues if a camera's address changes unexpectedly).

Subnetting

Subnetting divides a large network into smaller, manageable segments. In a CCTV context, you might place all cameras on one subnet (e.g., 10.10.10.0/24), all recording servers on another (10.10.20.0/24), and operator workstations on a third (10.10.30.0/24). This organisation simplifies management, improves security, and makes troubleshooting easier.

VLANs (Virtual Local Area Networks)

A VLAN is a logical division of a physical network. Even though CCTV cameras and corporate laptops may connect to the same physical switch, VLANs ensure they operate on completely separate logical networks — as if they were on different switches entirely. CCTV traffic on VLAN 100 cannot see or interact with corporate data on VLAN 200 unless a router or firewall explicitly permits it. This is a fundamental security requirement for any professional IP CCTV installation.

Quality of Service (QoS)

QoS is a set of switch and router configurations that prioritise certain types of traffic over others. In a CCTV network, video packets must be delivered with minimal delay and zero packet loss. QoS ensures that even during periods of heavy network activity, CCTV video streams receive priority treatment — preventing dropped frames, recording gaps, and degraded image quality.

2. Structured Cabling Infrastructure

Cabling is the physical foundation of the CCTV network. Poor cabling causes intermittent connectivity, voltage drop on PoE, and packet loss — problems that are extremely difficult to diagnose once the building is occupied and cable routes are concealed.

Copper Cabling — Cat6 vs Cat6A

Fibre Optic Cabling

Fibre optic cable is used for high-speed links between floors, between buildings, and between edge switches and the core switch. Fibre is immune to electromagnetic interference (EMI), supports distances up to 10 km (single-mode) or 550 metres (multi-mode), and provides 10 Gbps or higher throughput.

Cabling Best Practices

• Use Cat6 minimum for all new CCTV installations. Cat6A is recommended for future-proofing and PoE++ support. Never use Cat5e for new projects.
• Test every cable run with a cable certifier (not just a simple tester) after installation. Verify pass/fail against TIA/EIA-568 standards. Demand test reports from the cabling contractor.
• Label every cable at both ends with a unique identifier that matches the floor plan and camera schedule. This saves enormous time during troubleshooting and maintenance.
• Maintain proper bend radius. Sharp bends in cable degrade performance and can damage internal conductors. Follow manufacturer's minimum bend radius specifications.
• Separate CCTV cables from power cables. Running data cables parallel to high-voltage power cables introduces electromagnetic interference. Maintain at least 300mm separation, or use shielded cable (Cat6A STP) in areas where separation is not possible.
• Use conduit or cable tray for all cable routes. Never leave cables hanging loose or draped across ceiling tiles — this invites damage, rodent chewing, and makes maintenance impossible.

3. CCTV Network Topology

A well-designed CCTV network follows a three-tier architecture: access layer (cameras and edge switches), distribution/aggregation layer (fibre uplinks), and core layer (core switch, servers, and storage). The following diagram illustrates this topology for a typical multi-floor building.

4. Power over Ethernet (PoE) for CCTV

PoE delivers electrical power and data over the same Ethernet cable, eliminating the need for separate power cabling at each camera location. This is one of the most significant practical advantages of IP CCTV — reducing installation cost by up to 30% and enabling centralised power management from the switch room.

PoE Standards

PoE Budget Calculation

PoE Distance Extension

When cameras are located beyond the 100-metre copper cable limit, three options exist:

• PoE extenders: Inline devices that regenerate both data and power signals, extending reach by an additional 100 metres per extender (can be cascaded). Some extenders draw their own power from the incoming PoE, requiring no local power source.
• Fibre with media converter: Run fibre optic cable to the remote location, convert back to copper at a media converter or micro-switch with PoE output. Requires local power at the remote end.
• Intermediate switch: Install a small PoE switch at the remote location connected via fibre to the core. Provides PoE to multiple cameras in that area. Requires local power and UPS.

5. Network Switches for CCTV

Managed vs Unmanaged

For any CCTV installation above 8 cameras, managed switches are mandatory. Managed switches provide VLAN configuration, QoS, IGMP snooping, port monitoring, PoE scheduling, 802.1X authentication, and remote management — all essential for a secure, reliable CCTV network. Unmanaged switches are acceptable only for the smallest installations (4–8 cameras) where cost is the primary constraint and network isolation is achieved by physical separation.

Edge Switch Selection Guide

Core Switch Requirements

• Layer 3 managed switch with inter-VLAN routing capability
• Non-blocking switching fabric — all ports operate at full line rate simultaneously
• 10GbE or 25GbE SFP+ ports for server and storage connections
• Redundancy: Dual power supplies, stacking capability, or active-standby failover for mission-critical deployments
• Port count: Sufficient ports for all edge switch uplinks + server connections + management + 30% spare capacity for growth

6. VLAN Segmentation & QoS Configuration

Why Dedicated VLANs Are Non-Negotiable

Placing CCTV cameras on the same network as corporate computers, printers, and phones is a serious design error that compromises both security and performance. A dedicated CCTV VLAN ensures:

• Security isolation: Corporate network users cannot directly access cameras or video streams. A compromised office computer cannot be used to attack the CCTV system.
• Performance isolation: A large file download on the corporate network cannot cause CCTV recording to drop frames. Video traffic is guaranteed its own bandwidth.
• Regulatory compliance: STQC Essential Requirements (ER:01), effective April 2026, mandate network isolation for CCTV systems. Auditors will verify VLAN configuration.
• Simplified management: Network administrators can apply policies, monitor traffic, and troubleshoot the CCTV network independently of the corporate LAN.

Recommended VLAN Architecture

QoS Configuration Principles

• Mark CCTV traffic with DSCP value EF (Expedited Forwarding, decimal 46) or AF41 (decimal 34) at the edge switch port level.
• Configure priority queues on all switches to service CCTV-marked traffic before best-effort corporate traffic.
• Set bandwidth reservation: Reserve sufficient bandwidth on each uplink for the total calculated CCTV traffic plus 25% headroom.
• Enable IGMP snooping on all switches to prevent multicast video streams from flooding every port.

7. Network Security for CCTV

IP cameras are network devices — and network devices are attack targets. Poorly secured CCTV systems have been exploited worldwide as entry points for corporate data breaches and as nodes in botnet attacks. Network security for CCTV is no longer optional — it is both a best practice and, in India, a regulatory requirement under STQC ER:01.

The 10-Point CCTV Network Security Checklist

8. Wireless CCTV — When and How

Wired Ethernet is always the preferred connection method for IP cameras. However, there are situations where running cable is impractical or impossible — and wireless technologies provide a viable alternative.

When Wireless Makes Sense

• Heritage buildings where drilling and cable routing would damage protected structures
• Temporary installations — construction sites, events, emergency deployments
• Remote perimeter cameras separated from the building by roads, landscaping, or open ground where trenching is impractical
• Rapid deployment requirements where time constraints prevent cabling

Wireless Technologies for CCTV

9. UPS & Power Infrastructure

An uninterruptible power supply (UPS) is mandatory for every component in the CCTV signal chain — switches, servers, storage, and core network equipment. Without UPS protection, a power outage causes immediate recording failure and potential data corruption on the storage system.

UPS Sizing for CCTV

• PoE switches: When the switch has UPS protection, all cameras powered by that switch are automatically protected. This is a major advantage of PoE — you don't need individual UPS units at each camera location.
• Runtime target: Minimum 15 minutes runtime under full load — sufficient for graceful shutdown of servers or transition to generator power.
• UPS type: Online (double-conversion) UPS for server rooms — provides the cleanest power and zero transfer time. Line-interactive UPS is acceptable for edge switch cabinets.

10. Network Documentation

A CCTV network without documentation is a maintenance nightmare. Ensure the following documents are created during installation and maintained throughout the system's life:

• Network topology diagram: Visual representation of all network layers, switches, servers, and connections — as shown in Section 3 of this guide. Updated whenever changes are made.
• IP address allocation table: Every camera, switch, server, and workstation with its IP address, MAC address, VLAN assignment, physical location, and switch port number.
• VLAN configuration: VLAN IDs, names, purposes, and which ports belong to which VLAN on every switch.
• PoE budget tracking: Per-switch PoE consumption vs available budget, updated whenever cameras are added or replaced.
• Cable schedule: Every cable identified by its unique label, showing source (camera/device), destination (switch and port), cable type, length, and test certification status.
• Switch configuration backups: Exported configuration files for every managed switch, stored securely and updated after every change.
• Password register: Secure (encrypted) record of all device passwords, with a policy for regular rotation.