Complete Enterprise Guide for Hikvision IP Cameras/ Dahua IP Camera and Cisco Catalyst Core Switch
Series: Enterprise CCTV Networking with Cisco & Hikvision
Level: Intermediate to Advanced
Introduction
In enterprise CCTV deployments, hundreds of IP cameras continuously transmit video streams to Network Video Recorders (NVRs). When CCTV traffic shares the network with office PCs, VoIP phones, Wi-Fi, printers, or servers, congestion can occur.
Quality of Service (QoS) allows the Cisco Catalyst C9300X-24Y to prioritize critical surveillance traffic, reducing packet loss, latency, and video interruptions.
Benefits of QoS
- Prioritizes CCTV video traffic
- Reduces packet loss
- Minimizes latency and jitter
- Improves NVR recording reliability
- Ensures smooth live viewing
- Optimizes bandwidth usage
Enterprise CCTV Network
Internet │ Enterprise Firewall │ Cisco Catalyst C9300X-24Y │ ┌────────┼────────┐ │ │ │ Cameras NVRs Office Network │ │ │ Fiber Gigabit PCs & Wi-Fi
What is QoS?
QoS is a set of mechanisms that manages network traffic by:
- Classifying traffic
- Marking packets
- Prioritizing important traffic
- Queuing packets
- Scheduling transmission
- Managing congestion
Step 1 – Identify Traffic Classes
| Traffic Type | Priority |
|---|---|
| CCTV Video | Highest |
| NVR Traffic | Highest |
| Network Management | High |
| VoIP | High |
| Office Applications | Medium |
| Internet Browsing | Low |
| Software Downloads | Lowest |
Step 2 – Enable QoS
configure terminal mls qos
Verify:
show mls qos
Step 3 – Trust DSCP Values
On uplink interfaces connected to trusted switches:
interface TwentyFiveGigE1/1/1 description Floor-1 Fiber mls qos trust dscp exit
Repeat for all fiber uplinks.
Step 4 – Configure Access Ports
For ports connected to access switches:
interface GigabitEthernet1/0/1 mls qos trust dscp exit
If the connected device does not mark packets correctly, avoid blindly trusting DSCP values and instead classify traffic at the switch.
Step 5 – Classify CCTV Traffic
Create an ACL matching the CCTV subnet.
ip access-list extended CCTV-VIDEO permit ip 192.168.101.0 0.0.0.255 any permit ip 192.168.102.0 0.0.0.255 any permit ip 192.168.103.0 0.0.0.255 any permit ip 192.168.104.0 0.0.0.255 any permit ip 192.168.105.0 0.0.0.255 any permit ip 192.168.106.0 0.0.0.255 any permit ip 192.168.107.0 0.0.0.255 any permit ip 192.168.108.0 0.0.0.255 any permit ip 192.168.109.0 0.0.0.255 any
Step 6 – Create a Class Map
class-map match-any CCTV match access-group name CCTV-VIDEO
Step 7 – Create a Policy Map
policy-map CCTV-QOS class CCTV priority percent 40 class class-default fair-queue
This reserves bandwidth for CCTV traffic during congestion.
Step 8 – Apply the Policy
Apply the QoS policy to the uplink interface.
interface TwentyFiveGigE1/1/20 service-policy output CCTV-QOS
Step 9 – Prioritize NVR Traffic
Create another ACL.
ip access-list extended NVR permit ip any 192.168.200.0 0.0.0.255
Class map:
class-map NVR match access-group name NVR
Policy:
policy-map CCTV-QOS class NVR priority percent 30
Suggested Bandwidth Allocation
| Traffic | Reserved Bandwidth |
|---|---|
| IP Cameras | 40% |
| NVRs | 30% |
| Management | 15% |
| VoIP | 10% |
| General Traffic | 5% |
Adjust these values according to your actual network usage and traffic analysis.
Step 10 – Verify QoS
Useful commands:
show policy-map interface
show mls qos interface
show mls qos maps
show policy-map
DSCP Values
| Application | DSCP |
|---|---|
| Voice | 46 (EF) |
| Video | 34 (AF41) |
| Management | 26 (AF31) |
| Best Effort | 0 |
Many IP cameras transmit traffic as Best Effort by default. If so, classify traffic based on VLANs, IP subnets, or ACLs instead of assuming DSCP markings are already present.
Example Enterprise Bandwidth
One Floor
30 Cameras
4 Mbps each
30 × 4 Mbps = 120 Mbps
Entire Building
300 Cameras
300 × 4 Mbps = 1200 Mbps
QoS helps ensure this traffic is protected during congestion.
Queue Management
The Cisco switch maintains multiple hardware queues.
Example priority:
Queue 1 Voice ↓ Queue 2 CCTV ↓ Queue 3 Management ↓ Queue 4 Best Effort
Higher-priority queues are serviced before lower-priority traffic when congestion occurs.
Congestion Example
Without QoS
Office Downloads + Camera Video ↓ Packet Loss
With QoS
Camera Video ↓ Priority Queue ↓ Smooth Recording ↓ Office Downloads Wait
Troubleshooting QoS
| Problem | Solution |
|---|---|
| Video freezing | Check uplink utilization and QoS policies |
| Dropped packets | Verify queue statistics and interface errors |
| High latency | Confirm traffic classification and bandwidth allocation |
| Incorrect DSCP markings | Review trust boundaries and classification policies |
| NVR lag | Ensure NVR traffic receives appropriate priority |
Useful Cisco Commands
show interfaces counters
show interfaces status
show policy-map interface
show processes cpu
show memory statistics
show interface transceiver
Enterprise Best Practices
- Place cameras in dedicated VLANs.
- Use Single-Mode Fiber (OS2) for floor uplinks.
- Use CAT6 for camera connections.
- Enable QoS only after measuring actual traffic requirements.
- Validate policies during maintenance windows.
- Monitor uplink utilization regularly.
- Keep firmware updated on cameras, NVRs, and switches.
- Document all QoS policies and configuration changes.
Enterprise Data Flow
300 Hikvision Cameras │ CAT6 │ 48-Port PoE Switches │ SFP Modules │ Fiber Backbone │ Cisco Catalyst C9300X-24Y │ QoS Processing │ Gigabit Monitoring Switch │ 5 Hikvision NVRs │ Video Wall
Conclusion
QoS is an important part of enterprise CCTV design when surveillance traffic shares the network with other services. By classifying camera and NVR traffic, prioritizing critical flows, and monitoring interface performance, you can improve the reliability of live viewing and recording while maintaining good performance for other business applications.
Note: Exact QoS commands and supported features can vary depending on the Cisco IOS XE version and licensing on your Catalyst C9300X-24Y. Always verify command availability in your environment and test configurations before deploying them to a production network.
📘 Next Tutorial in Your Enterprise CCTV Series
Cisco Catalyst C9300X-24Y High Availability (HSRP, Stack Wise & Redundant Network Design) for Enterprise CCTV
In the next tutorial, you'll learn:
- Why redundancy is essential for CCTV systems
- Cisco Stack Wise Virtual and switch stacking concepts
- HSRP (Hot Standby Router Protocol)
- Dual fiber uplinks
- Rapid Spanning Tree Protocol (RSTP)
- Link Aggregation (LACP/Ether Channel)
- Redundant power supplies and UPS design
- Failover testing
- High-availability design for a 300-camera enterprise CCTV network
This tutorial will help you design a surveillance network that continues operating even if a switch, fiber link, or power source fails, minimizing downtime in mission-critical environments.
0 Comments