Isolated Guest WLAN - only Internet Traffic

Gernot

NAT mode: Use own DHCP of Nebula
Clients receive IP addresses in an isolated 10.0.0.0/8 network. Clients cannot communicate with each other, but they may communicate with devices on the wired LAN if the SSID firewall settings permit.

martinihenry

I think you can try with intra-bss blocking or L2 isolation to block between clients, see if that suits you? You can set the desired MAC to allow clients to reach, maybe that can do it.