It is easy and cheap to get 2 or more interfaces on a Pi, even a Pi 2:
- get a usb-ethernet adapter (usb3-gigabit works fine, usb2-fast ethernet is cheaper and slower)
- or use a wifi interface (not a very good idea for a router, wifi is flakey)
- or define a Virtual Lan ("VLAN",
wikipedia page) on eth0 and add either a "normal" switch or a "manageable" gigabit switch. A "normal" switch if the connected devices are modern/sophisticated enough and know how to use a VLAN. A manageable switch allows you to dedicate physical ports to a specific VLANs, you need that to connect devices that don't know what to do with a VLAN.
Best case (cost ~zero): your router box allows to add a VLAN interface to its physical port.
Define VLAN 12 (choose your ID between 2 and 4096) on the Pi, that'll give you a new interface "eth0.12". Set it to DHCP.
In the router, associate VLAN 12 to the ethernet port of the box.
On the Pi, set eth0 (the no-VLAN interface) to a static IP on another network than eth0.12. Add forwarding, NAT and filtering between eth0.12 and eth0
Get any old 5 port switch, no need here for a "manageable" one, 3 to 5 ethernet cables, and connect:
- box to the switch
- Pi to the switch
- PCs and stuff to the switch
Now the no-VLAN network will be the LAN zone, and the VLAN 12 network, with just the Pi and the box, will be the Internet zone. The Pi will do routing/filtering between the 2 just as if 2 cables were connected.
Of course, the Pi is *not* a very powerful router. Its ethernet interface goes at 100Mbps or so, there is quite a chance you won't filter/route much faster than 50Mbps once you've added rules and all. However this is still way superior to the bandwidth offered by a common DSL link, so it's perfectly fine. Within the LAN area, the performance will be guided by the switch characteristics. Gigabit switch recommended.
Cost: assuming you can't find someone to give you an old switch, or that old usb ethernet adapter bought for the now defunct macbook air ... an extra USB interface will run about ~10-15€. A manageable switch would be more expensive (~20-40€), but you get more ports; It's a bit bulky but switch+VLAN is the solution with most potential for expansion. Up to 4096 networks, imagine that
