Couldn't you just stick a router/firewall box on the port that connects you to the LEA network for the internet. Leave the CCTV plugged straight into the CCTV port?