Architecture Design

4.1 Typical System Topology

The IK10 vandal-resistant surveillance system is organized as a three-tier hierarchical network topology, with a dedicated power and grounding subsystem running in parallel. This architecture ensures that a single point of failure at any tier does not result in a complete loss of recording or alarm capability. The topology is designed to be scalable from small single-building deployments to large multi-site campus systems.

The core design principle is that every critical data path has at least two routes: fiber ring or dual uplinks at the distribution layer, primary/standby VMS at the compute layer, and local SD card backup at the edge layer. This "defense in depth" approach ensures that even a deliberate attack on the network infrastructure does not create a complete evidence gap.

Figure 4.1: IK10 Anti-Vandal Surveillance System — Typical Network Topology with Three-Tier Hierarchy and Power/Grounding Subsystem

Deployment Scale Options

4.2 Device Wiring Diagram

The device wiring diagram illustrates the physical connections between a single IK10 camera installation point and the supporting infrastructure. Every connection is specified with cable type, maximum distance, and protection requirements. The wiring design follows the principle that no cable should be exposed or accessible without tools, and every connection point should be sealed against moisture and protected against surge.

The junction box is a critical component in the anti-vandal wiring design. It serves as the transition point between the exposed camera pigtail and the protected conduit run. The junction box must be IP66-rated, mounted with anti-tamper screws, and include a tamper switch that triggers an alarm if the box is opened. All cable entries must be sealed with appropriate cable glands.

Figure 4.2: IK10 Camera Installation — Complete Device Wiring Diagram with Cable Specifications, Junction Box, SPD, and Grounding

4.3 Network Design Requirements

The network design for an IK10 surveillance system must address four key requirements simultaneously: sufficient bandwidth for all camera streams, network segmentation for security, redundancy for resilience, and quality of service (QoS) for alarm traffic prioritization. These requirements often conflict with each other and must be balanced based on the specific site constraints and risk profile.

VLAN Segmentation

All surveillance traffic must be isolated in dedicated VLANs to prevent unauthorized access and ensure that a compromise of the IT network does not affect surveillance recording. The minimum VLAN structure includes a camera data VLAN, a management VLAN, and an alarm/event VLAN. Cross-VLAN traffic is permitted only through the firewall with explicit allow rules.

Bandwidth Planning

Bandwidth planning must account for peak simultaneous recording, event-triggered high-quality streams, and management traffic overhead. The standard formula uses the per-camera bitrate multiplied by the camera count, with a 30% overhead factor for retransmissions, management traffic, and burst events. Storage IO must be sized separately with a 30% headroom above the sustained write rate.

4.4 Storage Architecture & Redundancy

The storage architecture for an IK10 surveillance system must provide three guarantees: continuous recording without gaps, integrity verification for evidence admissibility, and rapid access for incident investigation. These requirements drive the choice of RAID level, hot spare strategy, write cache configuration, and backup policy.