VLAN Explained please

hello, can someone give me a hint on the following configuration

Station1 wlan ip: 192.168.1.10
Station2 wlan ip: 192.168.1.11

AP wlan ip: 192.168.1.1

using VLAN i want station1 to be able to ping AP, but not station2, and station2 to be able to ping AP but not station1.

thanks for your help.

just uncheck ‘default forward’ on AP