Whats the best way to restrict access to the internet for my NVR. I have an Omada network and tried setting the switch ACLs to deny all NVR (on it's separate vlan) access to the primary LAN. Doing so made it so I wasn't able to access the cams as well (with a client on the primary LAN).