guest network under tomato

I have some ip cameras connected to my network by wireless (R7000 router). These devices may have some security issues. I thought of connecting to them via a guest network (which would restrict them from seeing the network). However, under Genie devices on the guest network are not visible from inside the network.

Does tomato have the ability to restrict inward access from some devices, but allow outward connections to work. From memory I think that might be possible using iptables.