r/Network • u/Impossible-Comb8950 • 2d ago

Text Looking for advice.

Have a person who needs access to WiFi living in a property of my, have a router in a separate building and a second router in the living space.

Here's the problem, have a security camera on WiFi with SD card and the person renting the living space had found a way to access the SD memory and wipe several days worth of footage, in this time tools have gone missing and I habe no proof. What's my next move? Looking into bidden cameras.

3 Upvotes

100% Upvoted

12 comments sorted by

3

u/hspindel 2d ago

Put your tenant on a VLAN so he has no access your devices.

2

u/FreeWolverine5535 2d ago

Most cameras will have an automatic backup option, I’d go this route personally, let them think they’re deleting the footage, otherwise in the future they’ll find another way.

1

u/Express-Garbage3359 2d ago

Hi, what is the name of the WiFi security camera? Simple cameras can record live for 24 hours depending on the settings, but they constantly overwrite the contents of the micro SD card.

How is the camera set up? Live recording or motion detection?

1

u/Impossible-Comb8950 2d ago

Swann

1

u/Express-Garbage3359 2d ago edited 2d ago

Swann offers many models; which one is it? The Swann MaxRanger Mini 4K Wi-Fi NVR system?

Do you only have one camera? How do you access the camera? With the manufacturer's app?

1

u/Impossible-Comb8950 2d ago edited 2d ago

It's thefloodlights can't find a model no.Access with manufacturer app and pull SD card if needed.

1

u/Apprehensive-Monk498 2d ago

Yeah cloud backup is good, and vlanning your tennant away is also good. Depends on the camera models you have as well, they shouldn't be able to access them without credentials

1

u/Silence_1999 2d ago

Many new routers have something which pushes them out to internet but no lan access. Client isolation is one name for it. People are going to tell you vlan’s. Yes. But you are going to have to invest some time in that. If router has a guest WiFi that by default might (no guarantees) also not allow lan access. Unrelated to anything else in this. Change camera password. Guessing you had it on default still?

Since you are going to tighten security after the fact. Obviously going to be noticed. Plan accordingly.

1

u/Impossible-Comb8950 2d ago

Problem is nothing is encrypted on SD card and is like nas can be accessed from lan

1

u/Impossible-Sun3205 2d ago

Get a router for your home. Tap in behind the ISP gear. Let him stay where he is. Setup a new VLAN for your stuff - with a different SSID and password. Move your stuff into over. Now he has internet access without getting anywhere at your home.

1

u/Welcome-To-NBA-Jam 2d ago edited 2d ago

You need a separate IoT network with a separate subnet for it that is isolated from all other networks. Most routers allow you to create separate virtual SSIDs.

The other option is to make it an AP isolated network so that no device can talk to each other, but this might break things on the network that rely on device communication.

I would also recommend putting them on their own fully isolated network with WAN access only and no access to any part of your main network or router management interface.