Segregation in Network

[Phoenix]

Here's the scenario, I want to have my Network Video Recorder and a few old Android devices in the network until I upgrade them to new, to be able to access Internet but NOT have Network access to any other PCs/Devices on the network.

The NVR should be accessible from my Network for local configuration and live view.

How do I accomplish this? I can see "Guest Network" for Wifi but can I do the same on per client basis and on LAN port i.e. LAN2 = NVR

[RomanHK]

If you want to divide LAN (LAN2) ports, use the VLAN functionality and use the firewall to control access to the NVR.
I've never used it so I can't help you better.

This configuration is not suitable for Gargoyle but for OpenWrt. A more robust setup is needed, which Gargoyle does not support.

[Phoenix]

If you want to divide LAN (LAN2) ports, use the VLAN functionality and use the firewall to control access to the NVR.
I've never used it so I can't help you better.

This configuration is not suitable for Gargoyle but for OpenWrt. A more robust setup is needed, which Gargoyle does not support.

Do not want to move away from Gargoyle TBH. I don't think I had as good of QoS as I have on current setup as compared to OpenWRT which I had last tried and DDWRT.

Unfortunately not able to find much information about VLAN functionality. I won't touch anything for now if its not in the GUI. I may end up adding an old router with another IP range to segregate if this does not work.

What is the purpose of DMZ? If I setup the NVR's IP to DMZ, what outcome will I have?

[RomanHK]

What is the purpose of DMZ? If I setup the NVR's IP to DMZ, what outcome will I have?

DMZ (demilitarized zone) is that all ports (except manually entered) from WAN redirect to LAN (IP address). More information here: https://en.wikipedia.org/wiki/DMZ_(computing)#DMZ_host