I am wanting to set up a Guest network on my Cisco SG250 switch and EnGenius EAP350 AP but I am having a hard time with the implementation.

ETA: My goal is to allow the devices connected to the Guest network to only be able to access the internet.  I don't want them to be able to see my NAS's, computers, etc.

I understand the concepts for the most part but a good tutorial would be helpful.

I want to use the AP's for my non-Guest network too if possible.  They appear to allow for multiple SSID's and you can set a VLAN ID as well it appears.

I am also running a Cisco RV325 router.

I have done the following:
1) Enabled VLAN's on the router and configured VLAN's 1 and 25 (Guest)
2) Enabled VLAN's on the switch and configured Port 1 to be a Trunk port as that is the uplink port from the router
3) Made a new SSID on the AP with a VLAN ID of 25.  It connects to port 18 on my switch.  I believe that I will need to make this port a Trunk port as well since I want both VLAN 1 and 25 to work on it correct?


I get confused on the whole Port to VLAN setup from there.

Any guidance would be appreciated.

Take a few youtube classes for the CCNA

I will look into those as I still need to understand it better.

I did finally wind up getting it figured out....I think.

Now my guest SSID can't see anything on my internal network but my main SSID's can see everything.

I had to turn on isolation on the AP's and set up the management VLAN as well.  The ports with the AP's on them are now Trunk ports too set to "Admit All".  I also had to tag the AP ports for all VLAN's.

It all seems to work as intended.