I run a seperate guest network, VLAN and SSID for IoT and HA. Works great for my Nest, Nest Protects, SmartThings and GeoSpring water heater. Oh yeah, my cameras too. My main net (corporate) can still see this subnet but the isolated network can’t see corp.