“Do I need a switch to isolate Ethernet ports? Or can I do it from the router with vlan?”