I am starting my own business and have just ordered a server with SBS 2011 Essentials; a Dell T310. I have a Netgear FVS-538 dual wan Firewall and a Netgear JGS524F 24 port Gigabit switch (unmanaged). I have 1 desktop and two laptops that will connect to the domain controller. I have about 10 other devices (TV, DVD, SONOS whole house audio, phones, etc.) connecting to the same network.
I would like to segregate the network into two separate IP ranges; 1 for the server and 3 pcs and the other IP range for the other devices as well as guest devices. I am starting to realize that this would be easy if I had a managed switch because I could use VLANS but am wondering if it can be done with what I have.
My main concern is what is the best way to further secure my information from the rest of the network. My thought is that the domain controller will provide an increase in protection as far as security goes but I was wondering if there is a way to put it on a separate IP range to further separate it from the other traffic. I know that my firewall has "multi-home" which allows me to add static routes to connect to the internet. Outside of that, I am not sure how or if I can have to separate ranges. Also, if there is a better way to do this, that would be of great interest as well as I am no expert.