Our client has four ER605's (3 are V2 and 1 is V2.20), each is its own site running on a Software Controller in Windows remotely. Each is on its building, own network, own internet.

The client wants to add 1 device to each of the four networks that must be isolated from all the rest only allowing internet access.

The sites have multiple LAN devices, some of which are linked through a different manufacturer's managed switch.

Is there a way we can isolate a single MAC address to communicate only with the internet and not see other devices? Can this be done with 2 devices on the network?

i.e. 30 devices all able to communicate with each other and the internet, another device with only internet access and no other visibility, and another with only internet access and no other visbility?

Thank you in advance