Restricting access within the network?

Question

Computer networks

Good evening, given:
3 unmanaged switches + 1 unmanaged switch inserted into the first ones, students hang on it.
How to keep students out of the network outside their switch?
There is no server either...
Group Policy?

Answer 1

local firewall on each machine.
If the stations are on win, then the free Comodo will do. I hope it is not necessary to say that students should not have admin rights?
If nix, then everything is obvious.

Answer 2

Different subnets on switches, prohibition of changes in network interface settings on workstations.

Answer 3

Install a router - software or hardware. I think there is 1 system unit for this. Personally, I don't see any other solutions. The local firewall has already been advised above. But personally, it’s not convenient for me to configure something at every place (when you have to make changes, you’ll understand why), it’s easier for me to tie everything to 1 node (router) and already steer everything on it.