^^^^
This
isolating the cameras from the Internet is part of the intention of using the built in PoE switch of the NVR. Thus the 10.1.1.x address that can’t be accessed via the WAN
If you want the cameras exposed, use an external switch on the same LAN as your NVR and plug them into that