I know it's heresy, but about the Apple Extreme Base Station...

[Gilbert]

In order to have the segregation you mention, you would need three routers, in a Y formation - one main router and then two routers connected to it. The main router doesn't need wireless capabilities, just the ability to set up two separate networks.

I wanted a similar setup but ended up choosing to do with a single router that handle multiple VLANs and internal switches. So I have a VLAN for our regular wired and wireless home network, a second VLAN for IOT, and a third VLAN for Guest. The setup was a bit more complicated, but it is working for us.

This article is dated, but I believe the information is still correct:

https://www.pcper.com/reviews/General-Te...Insecurity