You'll need more config than just an external virtual switch. That just allows VM access to the external LAN. If your host is on that same LAN, they're all connected.
There are 3 options here:
1. Physical solution: you need to configure your network where you're plugging the NIC that connects to the VMs directly to the internet, with no connections to your host's LAN.
2. VLAN/subnet: create a separate subnet for your VMs so they cannot see the network. This may be hard since you need to still access the same gateway.
3. Create a 3rd VM and install RRAS. This will isolate your VMs and virtual network but still allow them access to the Internet. This technically will allow access to the host, but since RRAS is NAT it will prevent the your VMs from sending/receiving
DHCP/DNS to your host network.
I've used this method to set up test AD domains in a virtual network while not affecting the host's network and AD.
For future reference, the Hyper-V forum is located here:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverhyperv
This forum is for the older product Virtual Server 2005 which is not related to Hyper-V. You'll find a lot more Hyper-V expertise on the Hyper-V forum.