Macs are large, and have the benefit of being both heavy *and* expensive.
You don't need vlans, or a better router - a small cheap linux box with two NIC cards in it will do this. If you're switch can do VLANs it's a bonus, as you'll only need a small cheap linux box with a single NIC to do what you want.
As wij pointed out, that router supports port based VLANS
one VLAN for each switch, one for the tubes (probably with NAT) different subnet on each of the internal Vlans, bit of static routing, and job done.
He could even use port based Vlans on the Cisco to get rid of the netgear switch (admittedly would need two links from the cisco to the draytek if only port based vlan was supported).. and if 802.1q was supported.. a trunk link would be the way forward!
//TrX