It is best to build separate IP subnets for trusted and non-trusted clients. This will let you develop firewall regulations correctly. That's the typical residence use, the place the swap is "downstream" within the router. The Access level that goes into one particular the ports fun