Port seperation

How do I configure it to use port 1 as the internet uplink for all other ports and the remaining ports which are connected to AP’s to be isolated from each other while still having access to the uplink port on port 1. We also need to get back to any port from the uplink port and get access to the ap’s on their respective ports. I can add port 1 to the bridge to get it to act as a switch and I have tried with vlans to get the port isolation to no avail. Any help would be appreciated.

Thanks

I would make each port a separate subnet and then firewall each subnet off from each other

They are going to be public ips traversing across each port handed out by a main dhcp server so separate subnets are not an option.