I've got an Audiocodes MP264 modem from WXC.  I've got a security camera with port forwarding working fine.  I'm concerned about getting hacked as the cheap Chinese cameras have no real security and their Linux web servers have default passwords with root access...  The camera does periodically ping a few IP addresses in China and Amazon.

I do not care about the cameras getting hacked, but I do care about the integrity of my network and devices on it.  Is there a way that I can setup the MP264 so that 1 Ethernet port is accessible from the WAN but not the LAN?  That way I can run multiple cameras with a switch through 1 port of the modem and no concerns that anyone from outside can get into my LAN through the cameras.

I guess as an alternative I can run my network on another router (with firewall) after the modem, but it would be more elegant if I can do it all on the MP264.  Thanks in advance.