I know that the guest wifi implementation in Asus AC87U uses ebtables to block access to the LAN side of things.
Is it possible to manipulate the rules, akin to iptables, and add a -d ! IPofClient ? (Or MAC address, since ebtables is dealing with Layer 2?)