Thanks Steve. Yes, that's what I've hopefully done with this new VLAN.You need separate & isolated VLAN..
only second port of NVR and cameras there...
I couldn't see an option for DHCP server on the VMS, but I've since set the secondary NIC to 10.2.30.1 (was 10.2.30.100) and updated all the cameras to DHCP. This hasn't made a difference BUT, the odd thing is, they appear to be working fine now using ONVIF via port 80.