By default, all the LAN ports are belongs to VLAN 1 (or in VLAN Disable mode), i.e. the four ports can see each other due to the same VLAN member.
However, if you would like divide the four ports into four different groups, say for example, four different apartments, then, you can setup the VLAN as below. Different port is with different VLAN member. Then, due to it belongs to different VLAN (red-part below), then port 1 to 4 can not see/ communicate to each other. And since it is enabled (blue-part below) all of them can still go to the Internet.