The first issue you will have, is that a router will be needed if you are using more than one VLAN. I suspect the service provider owns and configures the Internet router, so you can not use that one, and the switch will not do the same function on it’s own.
If you don’t have it already, download the manual for the switch at
and the SmartWizard software to access the GUI on the switch at
You should also download another document from Netgear, that effectively tells you how to do what you are asking, and gives step by step instructions, with illustrations as well. That is far better than we can do here, so go to http://kb.netgear.com/ci/fattach/get/19/1236780727/redirect/1 and get that document as well.
If you read that second one, it does include the config of the router. One point it also makes is that there is no layer 3 separation between the VLANs. What that means is that a person on one VLAN, can access resources on the other VLAN. To prevent that you use an access-control list. To do that will depend on the router you are using. If you do go that far, then post back here with the make and model, and we can help you with this.
I hope that gives you some start with this. It is unfortunate that you are likely to need more equipment, but what you propose is possible if you do get a router.