First, I'm not a security expert. But, what I setup was the advice of the security experts lol. My understanding is that if the IP cams are on a totally different subnet/NIC, they can't "phone home", get hijacked, or even connect to the internet (I have the gateway and DNS blanked on that...