work computer no LAN access

[floydian]

what is the simplest way to prevent my work computer from browsing devices on my network? 

I have opnsense and 2 ubiquiti AP's.  I seem to struggle over the setup of subnets, so I turn to this group to see what others might have for insight.  Thanks.

[lar.hed]

Do I understand this correct: You would like that IP of that PC to ONLY be able to access internet but not the local Lan (intranet)?

[bartjsmit]

Set up a VLAN for work and configure it on the Ubiquti AP's, OPNsense and any switches in between. Give it a different SSID and password and forget your main SSID on the work computer. Set up a DHCP server on OPNsense for the VLAN.

Bart...