@simpsonetti If your concern is using LAN resources that should be used for the regular network, you could implement a Guest SSID, isolate it with ACLs, and use bandwidth limiting to ensure the traffic never affects the main network. But if you want complete physical separation, you'd need a whole separate internet connection. If you can explain your use case more, we can offer further insight.

  @simpsonetti then I recommend just setting up a Guest Wi-Fi that only has connectivity to the internet; you can set up a VLAN that has public DNS servers and set up ACLs to ensure it doesn't have access to any other LANs.