Any switch that supports vlans will do this--if you're looking for _cheap_ hardware then try ebay--you won't find a managed switch, new, that costs less than two unmanaged switches.
Personally though I would go for physical isolation regardless of the technology I was using.