I have purchased an additional 24 port poe manageable switch L2 with a few L3 options. I will be running both this switch plus a dumb 24 port for all other devices. I have a Dahua 32ch NA06-4K with two gbit uplinks. I will use one to connect to the poe switch uplink and one to connect to my router. Looking for best setup to minimize attacks on ip cams. Thinking about making the ipcam network a separate vlan. Enable ACL with ips and MAC filtering. So the only way into the NVR is with a uncommon port along with allowable MAC only. Any thoughts?