If your router supports VLAN's, I'd use it. Then everything is nearly automatic and easy. Create a separate VLAN in your router with your "show" network IP range (not 192.168.1.x, I use 192.168.2.x), assign that to a port on the router, and make sure anything for the show is connected through that port. With that setup, you can "see" anything in the show network if you know the IP address (aka: you can use your browser to point at it), but the router keeps the traffic separate.