I have the following setup:
Internet -> Modem/Router (192.168.0.0/24) -> Switch (TL-SG105E) -> WiFi Router -> Any other network device
Note: Switch spans to a passive IDS
My WiFi Router does not support a guest network but I have a bunch of old WiFi routers that I figured I can use it to place all IoT devices on a different network.
The switch supports VLAN 802.1Q I am just not sure if with my current setup I can setup two VLANs that both share a common port (the edge router's port), e.g.,: VLAN 1 - 1,2,3,5 VLAN 2 - 1,4
This way ARP requests and effectively MAC packets from port 4 (the IoT VLAN) will never see the other ports except for the edge router.
Is this possible? If not, what else do I need to make this work?