does DD-WRT offer port isolation on older Atheros chipset routers?

Does DD-WRT for Atheros chipset routers support either "port isolation" or multiple LAN subnets (by port)? I'd like the router to have a "guest" Ethernet port (only able to communicate with the WAN, but protected, not an open/DMZ host).

Thanks! -WBE