My switch is a Cisco SF300-24P. The router is a Cambium MIMO OFDM Subscriber Module running
CANOPY 15.0.1 SM-DES. The ISP owns the router and will not give me access to it, so if I use a router firewall solution to block the cameras from the wan, it will have to be with a daisy-chained router (or a different isp, not too easy where I live).
Your ISP won't let you use your own modem/router?? Outrageous!! Time to move.