Thank you both. Will post my results.

Thank you both,will post results.

R1D2 wrote

Beware of AP router mode: it will expose your personal network to the guest network if connected to the same router/modem.

Which is exactly what I don't want to happen.

R1D2 wrote

Yes, the CPE210 supports multiple SSIDs and VLANs. But you need either a VLAN-capable switch or a VLAN setup in your router to use the Multi-SSID feature of the CPE210. See http://www.tp-link.com/at/faq-755.html for Multi-SSID setup.

I have a linksys wrt1200ac router. So, if I'm understanding the directions correctly, I must first set up a VLAN on the router than attach the cpe210's poe to that (VLAN) port. Correct?

R1D2 wrote

Almost correct. I don't know the WRT1200 (my last Linksys was WRT160), but if you are running OpenWRT, you can easily create two VLANs, assign a VLAN trunk (tagged) port and connect the CPE's LAN port (not PoE port) of the power injector to the WRT1200's trunk port. This way, the WRT1200 will direct traffic on each of the two VLANs into two distinct networks. Using the firewall you isolate both networks from each other.

Is OpenWRT different from DD-WRT, which I have on the WRT1200. With dd-wrt the firmware has vap not vlan and don't think i have it configured correctly. Have separate networks but for some reason the cpe is connecting to the main network (192.168.1.x) and not the guest network (192.168.2.x).

R1D2 wrote

Not much different: DD-WRT is basically just a customized OpenWRT, which might be better suited for end-users.

Of course DD-WRT has VLANs: http://www.dd-wrt.com/wiki/index.php/VLAN_Support

VAPs (Virtual Access Points) are multiple wireless network interfaces, which need a VLAN to be bridged to. See the introductory note on: https://www.dd-wrt.com/wiki/index.php/Multiple_WLANs

You need to enable the CPE's Multi-SSID feature in order to assign a VLAN to an SSID even if you only use one SSID (guest network). Select the VLAN ID which is assigned to the DD-WRT's guest network and mark the switch's port the CPE is connected to as a tagged port in DD-WRT.

Thanks for your input and time. I have another router the lynksys wrt54GS that i have the dd-wrt firmware on. With this router am able to set up a vlan (192.168.2.x) and then use the cpt210 as a repeater(extender) using the wifi ssid that i've set up on the vlan (192.168.2.x).

The problem i've encountered when trying to set it up with cpe210 in ap mode is that when i'm in the house the wifi ssid i've set up on a separate network appears correct. However, when i go back to the unit where the cpe210 is broadcasting and connect to the wifi ssid it indicates the home network ip address (192.168.1.x)

I must be doing something wrong, being that I'm not a network guy, it's a tad confusing and complex.

Just reread the post and will read your suggested links and when I read the tagging issue a light went off so I may still be able to salvage the wrtac1200 router.
Again, thanks alot for you suggestions and help.