VLAN possible with this setup?

Hi,
This might be stupid question, but I figured out it is better to ask then spent ton of time trying to make it work with no avail.
So I have following setup at home
Screenshot 2023-08-07 174214.png

  • hAP ac3 - acts as a main router, dns cache, dhcp server and also handles some split tunnelling of certain traffic through VPN


  • PowerBox Pro - this is mounted on the external wall of the house, so I can easily take ethernet cables to wall socket in any room in the house I need. It just acts as a switch + feeds the wAP ac with PoE


  • wAP ac - connected to wall socket in one room and boost wifi signal in areas not covered well by hAP ac3. Acts as a pass through to the unmanaged socket and also owns the capsman configuration

Now I want to add guest wifi and potentially some other VLANs (Smart devices, Work HW, personal HW, printer accessible from all), but I’m not sure it is achievable with this setup and I would need to do some adjustments?
Looking at http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 I might be somewhere between the Switch with a separate router (RoaS) and Router-Switch-AP (all in one) but I’m not sure at this point as I might be entirely wrong about my idea how VLANs work.