Hi, we have a Comcast SMC router which is connected to our ASA firewall and behind that is a Cisco 3550 48 Port Switch. Now in our office, we have some additional tenants who lease space and our plugged into our 3550. I want to keep them off of our LAN. How can i separate their traffic efficiently? Can i plug in another router behind the Comcast router (it has multiple interfaces and we have a block of public ips) and then assign them to different vlan?