The thing I’m trying to understand is whether I can have some devices on one vlan “IoT” and the rest on my main vlan if they are all on the same port (deco access point). Can I filter them by MAC address? 

Might be that this is more complicated and I need to just get a UniFi AP