

VLAN setting are probably your best bet to prevent communication with your normal devices and lock the IOT devices off in their own section of the network where they cant snoop around. Same goes for Wi-Fi, make a new SSID for just IOT stuff and let them only see themselves and the default gateway.
Douglas Adams