GOAL: My goal is to create 2 VLANs, 1 for the main network and 1 for the home ip cameras. The two VLANs need to be separated and the devices on different VLANs should not contact each other by any means.
My first thought was to use a switch with VLAN capabilities and the following diagram would represent the network:
Internet - Router - Switch - 2 VLANs
Until now it's all ok. But with these settings, a device landing on VLAN1 can reach out a device on the other VLAN since the packets will go through the router, right?
QUESTION: How can I completely separate the traffic between the 2 VLANs while maintaining remote access to the cameras VLAN? Is it just some ACLs on the router prohibiting the traffic between the 2 VLANs? If yes, am i over-complicating this?
It is possible that i'm missing a lot aspects, I'm really new to this topic. Thanks!