Virtual AP on hAP ax s

Two ways, either use datapath or set vlan id through /interface bridge port.
A great topic about VLANś is this:

Actually there is a third way (that I use currently):
Set VLAN ID through accesslist. Based on mac address (I know it can be spoofed) it will supply a CORP or GUEST VLAN ID.