I found this thread: Trying to bridge two subnets on the same interface (no separate LAN interfaces)
Unchecked 'use default route' on the CCTV interface settings. Also followed the same settings on the firewall as outline in the thread.
I can now ping the 10.1.1.0/24 subnet from the router!
However, I can't ping nor access the subnet from my laptop. When I do a traceroute, the first hop is to 192.168.1.1 (main router with internet connections) and then the default route of 192.168.5.1 (Nano connection).