And be careful with switches. You also (at least ideally) want switches which don't expose their own management interface to your isolated VLAN (usually this is

And be careful with switches. You also (at least ideally) want switches which don't expose their own management interface to your isolated VLAN (usually this is called 'management VLAN' as a feature description). My experience is that of the consumer level 'Web managed' switches, only the dlink ones do this.