What a Layer 2 switch does
A Layer 2 switch builds a table of MAC addresses against ports and forwards frames accordingly. VLANs divide it into separate broadcast domains, so the camera network and the office network can share hardware without sharing traffic.
What it cannot do is move a packet from one VLAN to another. That traffic must leave the switch, reach a router or firewall, and come back — the pattern often called router-on-a-stick.



