Guest network isolation

Thanks for the quick response. It seems I’ve already asked the question last month http://forum.mikrotik.com/t/use-hap-ax3-as-ap-with-guest-isolation/167661/1 and it seems I have a path forward.

I have another setup which is similar but different I could use help with on the same topic. My other network has same hAP setup, but this time I have a Mikrotik router (RB5009) connecting to the ISP. You’ve indicated the use of VLAN for isolation purposes on the guest wireless (as slaves to the main). How would I set this up best (I believe there are different ways for the hAPs) to tag packets with VLAN information?
Network_Schema-Windsong.jpg