Comment by CptKriechstrom

Put your PON on a separate VLAN on the switch