DHCP isolate from rest of network

i am running OpenWRT in my office and i have as LAN, where is the router.I would like whichever device gets IP from DHCP to not be able to see the rest of the LAN, but get Internet access. In case of a device that needs to see the LAN, i would manually assign the static IP from the DHCP, with its MAC address.

How could i achieve that through luci, please?

There's client isolation in luci.


they could just manually set there ip anyway and bypass it
you need to setup a guest network
easy to do for wifi not so much for lan