I've had my home network setup like this for years, though with VLANs instead of seperate physical routers. I've got : * LAN - where my wife and i connect our

I've had my home network setup like this for years, though with VLANs instead of seperate physical routers. I've got : * LAN - where my wife and i connect our laptops/phones. * SERVERS - for my NAS and a couple of small servers. * DMZ - just a single server sitting here. * KIDS - Where my kids and their friends connect their laptops/phones. It's a semi guest network, as it only allows traffic to the internet and a few devices on the IOT network, printers, Apple TVs, etc. * IOT - Internet of trash, only allows connections to the internet. Only network that allows uPnP. Has multicast repeating on for ChromeCast/Apple TV. * GUESTS - you guessed it. DMZ is the only VLAN that can be accessed from the outside. Each VLAN from the bottom up allows access from the VLANs above, with the exception of the guest networks. Nothing can access KIDS, IOT and GUESTS. KIDS can access a couple of devices on the IOT network like printers, Apple TV, ChromeCast, AirPlay devices, IOT and GUESTS can only access the internet. My UniFi network then creates 4 Wifi networks as well, one for LAN, KIDS, IOT and GUESTS.