The easiest way is to put your IoT devices on the guest network and block internet access to the network, but you could do firewall rules if your router allows that.
Or, get a home lab router instead of consumer grade. I went with MikroTik, and it’s a great bang for your buck. It’s not too dissimilar from Cisco in the cli, but the GUI is nice too.