Any router will do that, just set it up with an allow list in MAC filtering, everything else gets blocked, this is how I always configure my routers, stops anyone getting on the network even if they did get the wifi password as they are not in the allow list, or did i get the wrong end of the stick ?