AC68 as WiFi access point, restrict LAN access ?

[TomT]

Hi
If I use an AC68 as a WiFi access point, is it possible to create firewall/iptable rules to only allow wireless devices access to one LAN IP address (seperate router)

But for specific wireless devices full access to LAN ?

How could I do this ?

Thanks

 

[TomT]

Set up is :

All devices in 192.168.1.x range.
The Router is 192.168.1.1
The wireless AP is 192.168.1.100

MODEM -> Router Port 1 -> AC68u as Wireless AP running merlin
Port 2 -> 10/100/1000 Switch

All devices on the switch have full access to the network and Internet.
I want to restrict the Wifi devices access to LAN devices.

On the AP can I add iptables rules that will allow 192.168.1.10 and 192.168.1.20 to access the LAN devices, but all other wireless devices can only access 192.168.1.1 to get access out to the Internet ?

Is this possible ?

Thanks

 

[TomT]

Anyone know if this is possible ?
I've tried adding rules to INPUT, FORWARD and OUTPUT, but none have seemed to help.

Any idea how I can do this ?

Thanks