I could be wrong but I think you may need to add managed switches and set up separate VLANs or the traffic could be handled at the switch level without reaching the router.
I tried this just earlier this week. I assumed Forward Chain would work as desired but found I had to put the rule in either the input or output chain. I am running it as a hotspot though so perhaps that is the difference.
