Many wireless APs have a "guest filter" mode which prevents devices on the guest SSID from communicating with the LAN outside of DHCP and optionally other appro

Many wireless APs have a "guest filter" mode which prevents devices on the guest SSID from communicating with the LAN outside of DHCP and optionally other approved services. I use this on my home LAN, guests can communicate with the Chromecast and media server but can't reach the printer or others.