[ryandrake]

I take the lazy VLAN route, then. Ideally, I can plan all this out during construction, and run conduit through all walls, have electrical outlets near each ideal switch location, and so on. But in most homes that are not previously owned by tech-geeks, re-wiring properly means busting down drywall. If you own the home, it's a major pain, and if you rent, it's impossible.

Typically the things on my home network that need to be isolated and/or revoked Internet access are not in physical proximity with one another, so using a separate switch for them means a lot more wiring. It is much simpler to just run devices to the nearest already existing switch and do the isolation in software. This also cuts down on the number of switches which means fewer points of failure.

[autoexec]

Because we've already got the skills to secure a shared network I don't blame you. On the other hand though there's some benefit to redundancy too. if your switch dies it'd be nice to be able to take the cameras offline and swap in the working switch so your internet stays up while you wait for the new one to arrive.

For the crowd who can't isolate the cameras from the rest of their network and don't already have a bunch of networking equipment laying around though a dedicated network for the security cams is a easy solution that offers a lot of advantages over a ring cam.