Simple VLAN Configuration Help

I’m sure this is a simple configuration but I’m new to this router and need some help. I’m using a RB2011UiAS and I want to configure two networks. One for internal workstations including wireless clients and another for a security DVR. Need firewall security or internal network and perhaps the DVR network. Want to be able to access the DVR remotely via the web without exposing internal network to security risks.

Using a basic broadband modem from local provider and figured I would setup to VLANs and put internal network on one and DVR on the other (separate IPs) and create port forwarding to allow remote camera viewing.

Any direction on this would be greatly appreciated.