Yeah, I need to do that too. I actually already have a separate IOT wireless network, but need to finish it by actually creating a VLAN and separating it from the rest of my network/devices.
That being said, I would still want to isolate my cameras from the internet. Using a VPN is a much more secure method of accessing devices than letting them all punch holes/ports through the firewall for access.
PS - not to drag this thread off topic, but
look at this thread for information on some Aruba network switches. You can get 24 or 48 port POE switches off Ebay for around $100 and they are very capable switches (managed switches with VLANs etc) and don't require any licenses to work. I have both a 2500-24p and 2500-48p POE switch and they work great.