How to prevent user from access R500's Admin Page?

Question

I am currently setting up a R500 Access Point.

One of the Wifi network is intended for guest use.  I have it setup as "Local Subnet Reroute to WAN".

I would like to prevent users on this network from accessing the R500 Admin Page.

However, I can't seem to figure out a way to do it.

Setting the Wifi network as "Isolated" prevents internet access.

unknown · Answer

I am completely new to this.  I don't see a place where I can set exceptions.  No new options are unlocked when I set the "Packet Forward" to "Isolated"

unknown · Answer

Pretty sure to need to have it set as isolated, then add your default gateway and DNS servers as exceptions, so clients can get to them (and the internet) but nothing else.