any router that allows you to whitelist clients, pwede. actually, very common feature ito... kaya lang 'yung mga special firmware ng mga provider minsan nawawala itong feature na 'to.
kung sa access point mo gustong gawin, i would suggest yung enterprise-grade na merong standalone firmware - Ruckus Unleashed (that i'm very happy with), Aruba Instant... kung di naman gigabit ang internet connection mo, 'yung previous gen na in-upgrade ng mga opisina, e.g. 802.11ac Wave 2, tamang-tama lang. you can get these cheap (dini-dispatsa na nung nag-upgrade). Grandstream, very good pricepoint kahit brandnew.