Separate IOT Network?

[Droidling]

I'm a bit uncertain about at this so forgive me if I get the terms wrong. I've been watching youtube, and I'm afraid it has expanded my vocabulary without leaving me with much understanding.

I've read that for better security I should have a separate network for My IOT devices. (security cameras, lights, outlets, etc.) I haven't found anything on how I should do that. I currently have a modem with a firewall and router from comcast with one network mask. Then an Asus RT-ax58U connected through it's WAN port. It has the main network where everything is connected. The main network on a different network mask. I've also got an RT-AC56UThat has been connecting the switch in my home office to through wifi to the main network. There Was cat5e to the Office switch from the RT-ax58U but it doesn't seem to be working any more. I have been too lazy to replace it. Can I move all the smart devices to the wifi on the cable company switch. and call it good, or is there a much better way to separate the devices, from my laptops, and work computers?

I am not adverse to buying new equipment if that is the best way to go.

It's just 2 of us so not a huge load. Aside from a growing collection of smart devices, I will have a HTPC, a Denon AV Receiver, 3-4 Laptops, 2 desktops, 2 smart TVs, 3 Roku players, 2 Blu Ray players, 2 phones, 2 tablets, and probably a few other things I'm forgetting .

 

[Steve23]

If the devices you'll be placing on the IOT network are wireless devices, then you can create a Wifi guest network. This keeps the devices from being able to communicate with other devices on your LAN (blocks intranet access), and essentially gives them access only to WAN.

If you have a combination of wireless and wired devices, you can use a 2nd router to accomplish this too.

Generally I'm hesitant to use equipment provided by an ISP for my network, other than providing internet access. This is my preference, not gospel. One of the reasons this has become my preference is that this equipment sometimes becomes quite dated. Lack of updates becomes a concern for me.

 

[Droidling]

I've set up a guest network before. I was looking for advice on the preferred method. Will that allow a computer on the main network to connect with devices on the guest network?