Firewall - Network segmentation
Use VLANs.
Place IOT devices on their own VLAN.