I have one ccr1009-7g-1c-pc connected to internet through combo1 (sfp).
On the ether4 I connect a cisco phone (spa301). The SIP Provider has 8 servers.
On the ether3 I connect an access point (tablett, notebook, …).
On the ether1 a physical machine with virtual machines.
All these things are in the same lan: 192.168.1.0
No switches in my lan, behind the router.
You have my address list, my route, my firewall rules.
Bridge ?
At first I would like to have a basic protection, next to config SIP traffic.