I have a 2710n router running and am currently blocking some PC's using the MAC binded IP address from accessing the internet & Internet accessing it.

I would prefer to block all IP addresses from accessing the internet and then allow only the few PC's which need access (most of the PC's are actually tills and should be firewalled off completely).

The only trouble with this is that I have a second SSID which is isolated using the "isolate from LAN/MEMBER/VPN" which is used for guest access, the guests using the dynamic IP pool.

How can I firewall every PC on my SSID and wired LAN, passing just those I want to pass without affecting the guest SSID PC's?

Is this even possible?

Thanks!!