Yes it can be done, mate.Configure the router with multiple vlans (router interface is configured as a 802.1q trunk interface with multiple sub-interfaces) and apply an ACL (that governs internet access and DHCP access if necessary to the internal ne...