True guest network - separate DHCP

It continues to amaze me that consumer routers don’t support a true guest network without applying hacks.  A true guest network would have it’s own DHCP server, and this server would be enabled/disabled SEPARATELY from the main network e.g. AP mode on main network but still have DHCP for guest network.  Main and guest network would not be able to see each other (bridge) unless filter[s] applied.

This is how you have a truly secure network.  When I give guest access to a visitor, they should have no visibility on my main network AND my main network should not be providing DHCP services for them.  Ideally DNS is configured separately as well, as both are a form of visibility into my main network.

Consumers should not need networking certifications to configure a secure network.