How it’s implemented can vary, but you’re gonna take one of three approaches
- Microsegmentstion - On a home network this is the hardest but ensures there’s no overlap
- Separate VLAN - this is usually good if your router can support it and have multiple gateways for each VLAN. Your router can then restrict traffic. Unifi gear does this well and I use this set up to segment my guest and IoT traffic
- Separate subnets - if your router doesn’t support multiple VLANs this can work, but you still need a router that supports it
The latter two can actually work with an unmanaged switch as long as you tag your vlans correctly. The key is having a router than can handle it.
Keep going back much, much further. I remember hearing that phrase back in the early 2000s, and wouldn’t doubt it if if was referenced as early as 1999.