Private Area Network for each guest

How do I set up a private area network for each user? I would like the user to connect their chromecast and printers, and only they can access it.

I want all users to be in an isolation mode. They can connect to any available access points, and can access their devices on the network, but can’t communicate with other users’ devices.

We can’t use 802.1x as chromecast, smart speakers and IOTs don’t support dot1x authentication and we don’t want 100 SSIDs.

This is for my hotel, and we won’t know the MAC address of the device until the device connects to the network.

Some other router provides Multiple PSK (WPA2-PPSK) - Multiple passphrases for a single SSID for WPA2-PSK and assigns a user to a VLAN based on the passphrase.
hotel-wifi.png

VLANS?

You have to use VLANs, but how do I dynamically assign VLANs using a name?

If you don’t want to use radius, you have to know the device’s mac addresses.

Using radius is not an issue. How do I configure using radius?