Model :

Hardware Version :

Firmware Version :

ISP :

Hi:

I am using the EAP245 for my home network. My deployment topology is as follows:





I'd like to achieve the following, and can't figure out how to do so:

[*]Have separate "home" and "guest" networks,
[*]Both networks span both the 2.4 GHz and 5 GHz radios,
[*]Home network has access to the Internet, Ethernet nodes (desktop computer, NAS device, etc.), and other WiFi devices on the the Home network,
[*]Guest network has access to the Internet, and to other WiFi devices on the Guest network.


I gather that I can set up multiple SSIDs, and that I can assign them to separate VLANs. What I can't figure out is:
If I configure one SSID (say, "Home on 5 GHz") to one VLAN, and another (say, "Home on 2.4 GHz") to the same VLAN, does that allow access between the WiFi devices on the two SSIDs? Conversely, separate VLANs means no access?
How do I ensure that the Guest VLAN (say, the SSIDs "Guest on 5 GHz" and "Guest on 2.4 GHz") don't have access to any Ethernet-connected nodes other than the router, so that all they can do is go to the Internet, and talk to each other?

Please advise.