router: setup cameras vlan

hosts/router.home.ts.hillion.co.uk/default.nix

@@ -32,6 +32,14 @@
       nat.enable = lib.mkForce false;
 
       useDHCP = false;
+
+      vlans = {
+        cameras = {
+          id = 3;
+          interface = "eth1";
+        };
+      };
+
       interfaces = {
         enp1s0 = {
           name = "eth0";
@@ -47,6 +55,14 @@
             }
           ];
         };
+        cameras /* cameras@eth1 */ = {
+          ipv4.addresses = [
+            {
+              address = "10.133.145.1";
+              prefixLength = 24;
+            }
+          ];
+        };
         enp3s0 = {
           name = "eth2";
           ipv4.addresses = [
@@ -67,6 +83,8 @@
           table inet filter {
             chain output {
               type filter hook output priority 100; policy accept;
+
+              iifname "cameras" counter drop
             }
 
             chain input {
@@ -243,6 +261,21 @@
                   }
                 ];
               }
+              {
+                subnet = "10.133.145.0/24";
+                interface = "cameras";
+                pools = [{
+                  pool = "10.133.145.64 - 10.133.145.254";
+                }];
+                option-data = [
+                  {
+                    name = "broadcast-address";
+                    data = "10.133.145.255";
+                  }
+                ];
+                reservations = [
+                ];
+              }
             ];
           };
         };