It would be pretty hard do define overall best practices, but I have been thinking about doing this for my home network for security concerns. With my ever growing collection of "smart" devices and speakers I am concerned with the attack vector that could allow access to my network through a compromised or backdoored smart switch/speaker/light/camera/lock/thermostat, etc. The hard part is really figuring out what inter-VLAN access might be required or desired to operate. Each device can have different requirement and might be difficult to work with when on a different VLAN than the one used for general internet access. Good luck.
... View more