I am new to VLANS.

At the moment my internet comes in through port 16 on my switch, from a Ubiquiti Air Fiber link and a UNIFI Switch. 

On the TP Link switch:

ports 1 - 4 are cameras

Port 10 feeds another POE switch to 3 more cameras

Port 11 feeds DVR

Ports 7 - 8 are ruckus 

Port 9 is a ruckus zone director

Specifcally i want to section off the cameras and DVR, which i understand, but im confused how i will keep internet access and Cam VLAN on port 11 at the same time? EG 1-4,10 to port 11, while 11 keeping internet access to port 16 for remote monitoring.

i want to segregate cams from the internet. 

does it make sense grouping the ruckus gear together also? 7,8,9 + Port 16 for internet. 

Hopefully this isnt too badly worded. 

Thanks for any help.