Whitelist LAN access

Hello,

Is there a way to prevent LAN access for all devices except for a few whitelisted ones? Note that I don't want to prevent WAN access at all.

The reason for this is are tenants/visitors for a brief period of time and I am leaving my network setup in tact. This includes a server and a NAS which I will access remotely. I plan on only giving away the Guest SSID details (with no local access), however I would like to secure the wired ports.

Is there an easy way to do this?

Thanks in...

Whitelist LAN access