A. Do you absolutely NEED the VLAN for your NVR? Why not just isolate the devices on the network with a bogus DNS record or FW rule blocking via MAC or IP?
DNS doesn't stop direct IP comms. I have seen a few devices that talked direct IP to bypass DNS blocks. as you said, a firewall rule is a far better solution.
However, I don't trust my Chinese cameras enough to not rootkit their way across my network, so it has to be quarantined. a VLAN is one way to successfully do that.
personally I dislike the high maintenance costs of VLANs. That's why I opted to run a completely different network for all my IOT devices including cameras. the DVR is on that network and proxied through a dual homed server that straddles the two networks. firewall rules in place that only allow specific ports through on specific devices to specific devices.
when it first came out I was skeptical of their claims they wouldn't replace people with it, because what company wouldn't replace a person with a bot.
as it became apparent that not only was my original mistrust of them appropriate, but that they were literally breaking laws to build it, my dislike solidified into loathing.
then they began to force the use of it through companies, selling it as a product that can improve productivity while studies had proven the claims as false. my loathing precipitated to hatred when people started losing their jobs for not using it or just being replaced by it.
finally when my government began to use it to kill and oppress, my feelings about AI changed into those of active rebellion.
now, when faced with interacting with AI at work I perform as an idiot. I pretend I don't understand how to use the tools, or how to set them up. I pretend that I don't understand what the slop means that someone just vomited up in chat. I pretend that I am such a useless idiot that the only way to help is by personally interacting with me.
weaponized incompetence is a fine line to walk, but I've gotten pretty good at it over the years.
so yeah, fuck AI, fuck LLMs, fuck anyone who willingly supports fascist tools.