How to organize an entry point of a video surveillance network into an enterprise network?

Question

Computer networks

Good afternoon!
There is a large food business with its own working LAN with internet access. Also, the enterprise has a physically separate LAN with its own optical communication lines for video surveillance in which 150 ip cameras operate. It is necessary to correctly make a connection point for these two networks so that clients from the enterprise LAN can view the cameras they need from their workplaces and at the same time streams from the video surveillance LAN do not lie on the enterprise network, in other words, so that all packets from the video surveillance LAN do not go into the enterprise LAN, but only selectively. The question is how to actually do it, friends? Can put a router between networks? But how to do it right? Thank you)

Answer 1

Put a router on it, you can limit flows and control them.
If there is a smart switch, you can create two vlans on it and make routing between them.

Answer 2

Since it is not said exactly how video surveillance is implemented ...
If ip cameras are smart enough and store video locally, then no matter how you do it, data over the network will go only at the time of watching the video (you won’t watch video simultaneously from all 150 cameras, otherwise, for this you will have to fence a sickly intermediate server that processes such a stream).
If the data from the cameras goes somewhere, then this is where the bottleneck will be, it is most logical to do this not in the form of one expensive server with expensive network channels, but somewhat weaker, capable of processing a dozen other cameras.
ps Before building a solution, you need to evaluate the limit loads, for example, how many and how many cameras will watch in the worst case from the second network - this will determine the channel width between subnets.

Answer 3

You need a good managed firewall (router) like Mikrotik ac2 or older.
And then look how and from what where the traffic will be chasing.
What will be taken from the registrars, what will be directly from the cameras, and where and how to give

Answer 4

Thank you very much for your answers, friends! Thank you very much.
Most likely I will choose the option with a router.
I will add a little description of the situation (task), perhaps it will be necessary for understanding. The UHN network consists of 15 access nodes with Dlink and Dahua unmanaged gigabit optical poe switches. The cameras are connected to the nodes. Recording takes place on 7 16-channel video recorders and 1 32-channel video server. About 15 video surveillance clients are supposed to be in the LAN of the enterprise, these are directors, technologists, security officers, i.e. Flows to the enterprise network are not planned to be small. I think about 100-200 m / bit of video traffic, including broadcast. What router do you recommend to use?