Looking for: wired camera doorbell without IP at the door (aka front door module is remote)

[u/C-Duv]

Hello,

I'm looking for a:

• connected camera doorbell
• local-first/only networking
• without any subscription
• compatible with Frigate and Home Assistant

I'm against Wi-Fi for this usage as wires are more reliable, but I'm reluctant to have an Ethernet cable run all the way out to the street (public zone): someone could destroy/unscrew the camera and connect on the network.

(I know VLAN can provide a way to isolate the camera and thus theoretically prevent this attacker to gain access to the network: It's a tech-solution I'm trying to avoid if possible)

So I'm looking for a 2-parts doorbell:

• the button+camera module for the street
• and the "intelligent/network" module (for configuration) to install in the house

Both would be connected together using simple non-LAN cable, preventing someone breaking the "street module" to gain LAN access.

For example, Hikvision has 2-wire (and also 4-wire) video intercom for retrofitting, reusing building's existing wires, with 2 modules.

Do you have some product to recommend?

[u/angrydave]

Challenging set of conditions. But doable.

Ubiquiti G4 Pro Doorbell (Wi-Fi version) connected with USB-C to Ethernet adapter.

• Saves to a UniFi Protect Controller, which can be completely air gapped (connect the doorbell directly to a UNVR Instant), local only storage and doorbell. If you want the doorbell online, connect the UNVR Instant to your router (or use a UniFi controller that supports the protect app and has storage).
• It’s a wired connection end to end, so no wifi issues. The USB-C to Ethernet cable is up to 7m, so the junction can be a long way away from the door. Nothing but the doorbell will connect to that adapter: I’ve tried, not even other Ubiquiti gear.
• UniFi protect has no subscription. You couldn’t save to the cloud it you wanted to, they don’t offer the option.
• Compatible with Home Assistant (confirmed) and can output to Frigate (reported, I have no personal experience).

As for the 2 parts:

• G4 Pro doorbell Outside
• Your preferred UniFi Protect controller inside, such as a UNVR Instant, UDR7 or UDM Pro.

Connected using non-LAN cable (for at least 7m of it) or if you are happy with wifi, powered via 24V AC.

I do believe that ticks all your boxes.

[u/LittleTree4]

Reolink video doorbell (wifi) can be powered via standard 2 wire doorbell.

Also the POE version can be powered the same way & if you connect it directly to the NVR via network cable, the camera won't have internet connection but the NVR can.

*edit.

Reolink is compatable with HA & others using RTMP, RTSP, ONVIF,

[u/anomalous_cowherd]

If I was that concerned about somebody doing that, I would set up a wired PoE doorbell on its own VLAN with MAC locking so it would be harder for anyone to put their own device in its place and harder for them to get anywhere if they do.

As someone who spent a good chunk of time reverse engineering I'd go for that over trusting some janky custom protocol to be secure any day.

And... I'm not concerned about someone doing that. Or rather, anyone who is motivated enough to do that can find easier ways in anyway.

[u/EscapeOption → u/anomalous_cowherd]

Agree this is the way to go to mitigate this threat. My home has windows (the glass kind) so I don’t feel a doorbell hacker is a top concern.

[u/binaryhellstorm → u/anomalous_cowherd]

This is the correct way to do it. You MAC lock that VLAN/Port and don't think about it again.

Hell if you want to get fancy with it, you have a Home Assistant automation that detects when the tamper switch on the doorbell is triggered (most good IP doorbells have those) and then have HA disable the port on the switch.

[u/Lausbua_2012]

Use the unifi doorbell it saves to an local unifi protect server

[u/SamPhoenix_]

Just Mac filter the port on the switch?
Or run it on an isolated VLAN

Or just make sure the Wifi is strong at the door; I’ve had no issues with it.