Yes, it would.
I can and will go with a separated LAN, never used VLAN before and I am scared to mess something up.
Moreover thanks for your input you got me thinking how I could use my stupid tomato router which is now forgotten in one corner.
This could work:
TEA Ethernet where all the TEA gear is (no DHCP, only fixed IPV4 192.168.5.xxx/24) <---> WAN Tomato (fixed IP 192.168.5.1)
LAN Tomato (DHCP Server on 192.168.4.xxx/24) <----> Second NIC Win10 Box (DHCP ON)
<-----> Wifi TEA for monitoring Devices with old iPads for example.
I like it. No internet on TEA Devices, and a stupid firewall between them and my PC / TEA WIFI.
Not sure if I will ever need DHCP for TEA gears... I like to have a fixed IP for that kind of devices....
If I made a stupid mistake sorry, I am still learning this...
EDIT: I liked your post so much I elevated you to my buddy list.
EDIT2: BD do not be jealous, you were in my buddy since forever....
![Wink ;)](https://www.eevblog.com/forum/Smileys/default/xwink.gif.pagespeed.ic.cldandycH0.png)