Need separate isolated network for work purposes

Sorry I responded to the first response. This is exactly how I have it but vlan setup on port 3 and 4 but should I bridge the NH20 port 10g ?? Will the regular network booster work fine ?? I tried it this way but the wifi 7 booster worked for about a day then but the big one could connect to it but would not access internet tech replaced with new one and for whatever reason the tech moved my 10g port cable to port 3 and did not mention anything now my company is investigating potential customer information being comprised they are very strict about this type of thing and the reason it needs isolation