Services can be isolated across a single physical network interface. A gateway that is installed at the user's premises can include a single inbound port over which multiple services can be provided to the premises. The gateway can evaluate all outbound frames that are received at the port to identify to which service they pertain and then tag the frames with an identifier assigned to the service. This tagging will enable the frames to be delivered to the intended service provider. When the gateway receives an inbound frame, it can strip the identifier from the frame and forward it over the single inbound port regardless of the service to which it pertains. In this way, multiple services that are provided to the user's premises can remain isolated on the wide area network even though they are provided over the same physical medium on the user's local area network.