a switch would be easier to set up. the only real reason to set up another router and firewall is if you planned to make one of the subnets more of a demilitarized zone. there are serveral reasons you'd want to do this, you can google dmz's to see if one applies to you.