How to isolate vlan over multiple routers

Hello,

I’m looking for the best (and easy) way to configure six routers (3 + 3 vrrp) and isolate a single vlan from all the others vlans.
This vlan represents a wifi guest access, and it must go only to the internet.

(PS:by now all the vlans know each other because of ospf routing)


What do you think?
Does exist a “central administration” to create and deploy rules widely?

thx