You could also do this with a Cisco ASA 5505, you can have multiple vlans on the router and set security permissions between the network.