Jim Thompson wrote:

It's all peer-to-peer, but requires password log-in.

Maybe that's adequate?

Not adequate if they download something with a trojan, which kids always do.

Put the wireless outside your firewall, in a DMZ.

You need another wireless router.

Your ISP goes into its WAN port.
One of its LAN ports goes into the WAN port of your existing router.
Your PCs are connected to the existing router.
All other ports in the house that somebody might plug into are on the ports
of the wireless router, which is ouside your LAN.

For absolute isolation between 2 LANs you need a Y configuration, with 3
routers, but the kids aren't going to mount that kind of attack.


--

Reply in group, but if emailing add one more
zero, and remove the last word.