This is very easy to do. Setup a default VLAN for data and another VLAN for your guest wireless SSID. Then create your 2 separate SSIDs and under the guest one, tell it to use VLAN tagging. IN the drop down, select the VLAN you want. I use 4, but you can number it whatever you feel like.  Also, add a firewall run denying the guest subnet any access from any port to the main SSID network. You can add an exemption if you want if there's a printer for example, but I generally don't. With the Merakis, it's really easy 🙂   ... View more