IP camera VLAN and opening port 80
Question about setting up IP camera external access. I'm concerned about opening up port 80 for web access to my proposed video DVR/server (the DVR software requires it). I know that I would have to login using username and password but by opening up port 80, I'll essentially exposing the rest of my network to the internet.
I have a netgear prosafe router and netgear 7224 POE 24 port switch which would allow me to set up a VLAN for the IP POE camera network. Can I open up port 80 specifically only for the IP camera VLAN? The DVR has a single NIC. If I was using computers on my network (INTRAnet) to access to video management software, how would I tie in access to the VLAN but again leaving the rest of my network protected? If I was able to add a second NIC to the DVR, would I just connect the second NIC is plugged into a normal port (non-VLAN) so that the authorized users can connect to it from the desktop app or phone app. Would I still have to open up port 80 on the normal (non-VLAN) network for off-site access??