This is how I have it set up. I have a separate network for IoT, with a home-built webpage to reach all of the devices using their API. No Net access for them.

This is how I have it set up. I have a separate network for IoT, with a home-built webpage to reach all of the devices using their API. No Net access for them. It works pretty well for me, but I'm guessing your average-joe doesn't want to write a webpage for every new gadget he gets. It's ridiculous that I've had to do this