How to forbid some IPs or computers to access other LAN

I linked my home LAN and my Office LAN by Zerotier. Both clients were installed on iStoreOS (Openwrt). Now it’s easy for me to visit these two LANs. But I don’t want all devices in both LANs may have access to all resourses. For example, I want to allow only my computer at my office to have access to my home LAN.
How can I do? Thanks.

Have a look at the rules engine so that you can achieve what you expect : Rules Engine | ZeroTier Documentation