Set up ASUS AC66U to only access Guest WIFI -> ASUS Router - Private LAN -> Gateway -Internet->

Hi,

I got a LAN with a router/modem etc.

Now I want to setup my AC66U to work as a guest AP(or router with wifi) that does not allow any wifi user access any other client on my LAN.

How do I do that (with the asus firmware)?