Hello,

We have a single site LAN with surveillance. We want to isolate surveillance traffic (cameras and NVR) with a VLan.  The cameras get powered by the POE switch.  All workstations need to access the surveillance system & cameras.  The surveillance VLan is not primarily to restrict security access.  Security within the environment is not an issue.   The cameras are often accessed directly via their IP address for configuration and monitoring from any PC.   All endpoints are on the same subnet.   The Jetstream TL-SG3452P offers multiple types of VLans.  We want the simplest option for creating the surveillance VLANs and enabling the PCs to access all traffic and other devices on the LAN & VLan.   The surveillance NVR needs internet access too for the purposes of accessing the surveillance cameras from offsite.   We want the fastest way of deploying and managing the switch.    Remote access (VPN?) to the LAN in the future would be great but not initially required. 

1. Is 802.1Q the appropriate VLan type?
2. Is it sufficient that all endpoints except surveillance are configured as trunk type?
3. Is any tagging of ports required? 
4. Is the Omada software cloud management recommended in preference to directly configuring the switch.  Wifi Access points are not Omada access points.
5. What are the recommendations please?   

Thanks.