How to divide devices into independent groups in a local network with a router on dd-wrt?

Question

Mobile devices

Good day to all.
Tell me what do I need to do?
There is such a local network , and it turns out that mobile devices are in the local network, i.e. from a smartphone, you can safely delve into the balls on the company's computers. How can I separate the local network of the company and these smartphones so that the smartphones still have access to the Internet?!
PS The company also has its own mobile devices, which it would be desirable to connect to the internal network (there are not many of them, though, 3-4 pieces).
Router - Cisco linksys wrt160nl with DD-WRT v24-sp2 (08/07/10) std - build 14896 Switches
- D-link DES 1024a
WiFi point - Cisco wap 4410n
LAN without AD
Total 11 PCs
As a rule, in such situations, VLANs are used, but I don’t have managed switches here to mark traffic. Can multiple DHCP and 2 networks without routing among themselves? But how then to explain to him to distribute IP from the 2nd DHCP only to wifi clients on these wifi points?

Answer 1

Can multiple DHCP and 2 networks without routing among themselves?
That's the easiest way. But the router radio must support multiple SSIDs , (most routers have this support), then in dd-wrt it can be done, for example, like this .
Official wiki
Works for both router mode and ethernet-bridge.

Answer 2

Vlan to access points and resolve to ddwrt, but it's not very convenient to do it there.