A VLAN is a good option. Using group policy is another good option, and tagging each camera (you can often identify these by the MAC address then begin with). If the cameras don't need to talk to the Internet or other sites you could also simply use the "Block" option.
... View more