Looks good. Make sure the cam cannot / can never connect via IPv6 to the internet.Another dirty way is to set wrong DNS and gateway in client / cam settings.