I have a 4th Gen AEBS. I have a default 2.4 Ghz SSID which is set up in the Wireless tab as WPA2 Personal. I have a second 5Ghz SSID established via the Wireless Options… panel with a radio mode of 802.11a/n - 802.11b/g/n (Automatic). The 2.4Ghz and 5Ghz channels are set to Automatic with WPA2 Personal. These share the same subnet and DHCP range.
In addition to these two SSID, I have enabled a guest network with WPA2 Personal and it is on a separate subnet from the first paragraph.
From the Network tab's Network Option… panel, I have set up exclusive DHCP ranges for each subnet.
Using the Network tab's DHCP reservations, I added static devices on the first subnet with IP addresses below the starting DHCP range. This is where I thought you might want to add your security camera, but you may still want it on its own subnet which you could also add to the (static) reservations list in this section.