Buy a managed switch and isolate stuff on a separate vlan. Ideal for untrusted devices like chine cameras or other iot devices