I think you need to look at disabling "Inter V-Lan Routing" in the V-Lan setup screen.  Wireless Isolation as I understand it will prevent a wireless client from talking to another wireless client, but will not prevent it from getting to the router ...