On the diagonal of the VLAN access matrix you can toggle device isolation on/off in that VLAN.
If you set device isolation in the VLAN “LAN” on, does that imply that you can not manage the router ?
(Managing from another VLAN is not possible as the router can only be accessed from the VLAN “LAN”).