Googe fiber routed static help with firewall

I have a google fiber with 5 static ip’s being routed to me. Google requires you to use dhcp and then your ip’s are routed to that dhcp address.
I need to have 4 of the 5 statics on the router for local use and one ip for vendor router plugged into ether2.
So far what i have is DHCP from google, a bridge setup (bridge1) with 4 of the 5 statics and ether2(vendor router) is a member. everything is working but what i have issue with is firewall for my 4 statics and the dhcp address from google. how do i protect my 4 statics and the dhcp but allow ether2(vendor router) unrestricted access?
gf.png