Thanks for all the replies.
Thanks, @Flintstone61 , the NVR sections off the 2nd LAN with its 2nd network port. Must have an inbuilt router/firewall. If I VLAN the cams, I can run a single cable into an open switch on that segment, although I'm going to try to set the cams up on the 10x network...