IP Addressing and Subnetting for CCTV Networks

A practical introduction to private IP ranges, subnet masks, gateways and clean camera/NVR network planning.

Private IP ranges

Common private IPv4 ranges include 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16. These ranges are commonly used for internal CCTV and office networks and are not directly routable across the public Internet.

Subnet masks

A subnet mask determines which part of an IPv4 address identifies the network and which part identifies the host. A /24 network, for example, provides 256 total addresses, with 254 normally usable host addresses.

Keep CCTV organized

For larger installations, a dedicated CCTV VLAN or subnet can simplify management and reduce unnecessary exposure. Cameras should have planned addresses, the NVR should be reachable from the management network, and default credentials should be changed.

Gateway and Internet access

Cameras do not always need unrestricted Internet access. If remote viewing is required, use a secure architecture and only allow the connectivity actually needed. Do not expose camera administration interfaces directly to the public Internet without a strong security design.