Block LAN ports same as guest WiFi

Hi all, I have repurposed our old Neatger DGND3700v1 as a guest access point and it works purrfect, no wireless device and see or access our local domain network, but I would like to extend this to the 3 ramaining LAN/RJ45 ports on the back of the router, as right now any device plugged in to these can still see local network, is this possible?


Set up a new VLAN in the switch for those 3 ports, then connect it to the guest network bridge along with the guest AP.