Hotspot

I have a question about the hotspot software.

I want to do some routing, on the outgoing interface (WAN)

I want to have 2 subnets on the WAN interface, 1 for authorized clients and 1 for unauthorized clients.

For example:
RouterOS LAN: 10.0.0.0/21 subnet
WAN Vlan1 10.1.0.0/21 (Authorized)
WAN VLan2 10.2.0.0/21 (Unauthorized)

Also, every client must have a new ip in the VLAN subnet (authorized or unauthorized)

Is this possible?
And if so, how can I do that?

Thanks in advance