Setting up NVR & cameras to an existing ISP serviced home netork, some questions

[Rockdoc]

Home network is an Actiontec T1200H unit, supplied by ISP phone company & the signal comes thru the phone line. We have DSL to TV's, a wireless serviced TV off the LAN & currently 2 PC's off the same LAN. One spare LAN port.
Will begin setting up NVR & cameras as soon as they arrive.
I want to isolate the NVR from the existing network (subnet?) & set it up that I can access the NVR via VPN & reduce or eliminate any outside access to the NVR/cameras while on the home network.
Would isolating the PC's be a reasonable choice while we're doing this at this point? Does a switch come into play here?
I'm computer savvy but networking poor on this, so be gentle.

Thanks for any input.

 

[looney2ns]

Study this: cliff notes & this VPN Primer for Noobs
and this: Resource Guide on IP Technology for all Noobs

 

[Rockdoc]

Study this: cliff notes & this VPN Primer for Noobs
and this: Resource Guide on IP Technology for all Noobs

Thanks for that. The "system" arrived a couple of days ago, but we've run into some cold & a foot of snow up here, so we'll settle back & do some reading before getting back up in the attic.