I ended up creating a new vlan, segregated from my main vlan like cam, but with access to cam and to wan. I'll put BI here and can move other stuff that does not need access to my main lan.
