OMG Unifi Guest wifi setting by default blocks access to all other local subnets, and allows you to whitelist certain ones. ie. if you whitelist x.x.x.100/32, it effectively only allows access to that single IP, or multiple.

So useful.