usually lan devices do not talk to the router unless they need a resource outside your lan network

you can however isolate with vlans and a vlan capable switch, then it would be on the router to isolate traffic between lans (I do exactly this for my less trusted virtual machines)