My apologies for butting-in on an old thread...
Do you know if your statement applies to all AIMesh routers (Asus and/or Merlin f/w). I have a problem where I wish to block IoT devices from accessing my LAN, but some can't handle the 3 digit subnet that is applied when disabling Intranet access...