I use consumer (Netgear) switches with VLAN support to enforce network separation. The actual routing is done as a router-on-a-stick. It’s not perfect but it’

I use consumer (Netgear) switches with VLAN support to enforce network separation. The actual routing is done as a router-on-a-stick. It’s not perfect but it’s simple, scalable, and reliable.