If you set up appropriate firewall rules on the router that all of the cameras and NVR are connected to, there is No reason to unplug the Ethernet cable.
- Outbound Rule - Block all traffic
- Inbound Rule - Block all trafffic
- Enable exceptions:
-- Allowing syncing with an external time...