The solution is to block the camera’s mac address at the router and then access them remotely via Tailscale.