I’m building a network for my future home. It will have two possibly sketchy IP cameras hooked to the network via PoE that shouldn’t be able to reach the internet or my other devices. Only inbound connections from my local network to the HTTP/RTSP ports on the cameras should be allowed.
How would you implement this in a network? A simple switch with VLAN functionality doesn’t seem to tick the boxes, since not all switches with VLAN support allow keeping certain VLANs off the internet and more trusted home devices should still be able to reach the cameras.