Is it possible to restrict PC access to the network?

Question

Computer networks

Good afternoon, ladies and gentlemen.
We need your help with a security issue.
I had an isolated network, but now there is a need to provide access to the network to a machine, behind which a person will sit, who probably wants to collect information or play a dirty trick.
The crux of the matter is as follows.
Is it possible to limit the visibility of the network to the "Video Client" so that it cannot scan the network (find out camera addresses, etc.), but at the same time so that it has access via CSO, IVMS, a network drive to the server to view live video-video archive?

The connection scheme is approximately the same as in the picture
Client Video -> youtube cable -> Mikrotik -> optical cable -> Aruba 2530 to the 50th SFP port
Video server -> youtube cable -> Aruba 2530 to the 20th port.
What steps need to be taken to achieve this goal? if it's possible of course

Answer 1

It seems to me that all this loses its meaning if there is access to iVMS, there is also an IP viewing function.
The variant with VLAN seems to me the most reasonable.