How to isolate a computer from the network, but leave access to the Internet?

Question

Cisco

there is a cisco2911 router with one tail looking at the Internet and through the tunnel to other branches, and the other to LAN. In LAN there is a computer for visitors, how to isolate it from the network and the tunnel, but leave access to the Internet? Besides what to create vlan and to put the computer in it? An example config is desirable.

Answer 1

VLAN and ACL There you will have config examples. In general, google "Networks for the smallest" and study the material.

Answer 2

You yourself answered the question:

create a vlan and put a computer in it

either give it an output through other equipment, or isolate it with a vlan. You can use acl, but why?