Hi
Please try to create different WireGuard profiles,
then go to LuCI - Network - Firewall - Traffic Rules and create the following rules for the WireGuard IPs that need to be isolated from the LAN:
Note that you need to drag this rule above wgserver2lan.
Results:
isolation:
allow2lan:




