I use VLANs for this as others have mentioned. You can create VLANs for the logical grouping of devices (ex. Home, Work, IoT, etc), then you create firewall rules to block specific traffic sourced from the IoT VLAN to the other VLANs or out the WAN interface. This still allows traffic originating from the Home/Work VLANs to talk to the printer but doesn't let devices from that VLAN scan the network.