u/Delta-EX

Hi. I have a roommate who clicks shady link and got his accounts hijack a few times. I am worry that they might download something and infect the main router, so I'm trying to create a way to isolate his connection from communicating with the rest of the house. so far the set up is modem->main router->management switch->roommate's router. I heard a vlan will help, but I'm unsure how to set it up in a way where the main router is able to communicate to the roommate's router so they can connect to the internet, but preventing their connection backing into the other router.