RB4011iGS+RM plus CAP AC - VLANs in the home

Assuming you are following this guide, set the cAP AC exactly as demonstrated in the article. Always think of a SSID as a VLAN Access port, a port that handles as many wifi clients that know the password. You don’t need to use CAPSMan with only a single unit.

Regarding the router, those settings are the default. You don’t have to set them yourself. They will appear in the export, but you may disregard them.