Comment by nickstinemates

Network segmentation, i.e use of vlans is the traditional way to solve this.