I have a couple of Reolink PoE cameras that live on their own VLAN without internet access except for NTP. I can access them through the LAN, and outside the house using a Wireguard VPN.