If this is the configuration, you have already defined VLANs
from:
ps: security is a process, but in general if you have kept the firewall settings as I have been able to observe you should be quite safe ...
at most you can connect a pc in network cameras (10.0.30.x) and verify that you do not have access to your lan but only traffic to the internet (but from what you have posted it already seems so) at most include in this post your current configuration.
ps: I hope your switches are already management and you have already defined vlans on them