Pfsense 3100 and multiple ddwrt access points

[Tommyboy]

Hi,
We've been using an sg3100 as router and multiple r7000 access points (ddwrt) succesfully for years.

I want to add a guest wifi network that is not able to communicate with the main network.
So each access point needs to broadcast the wifi from the main network AND the wifi from the new guest network.

So i probably need to create a vlan on the pfsense router, and then create a virtual access point (vap) on the ddwrt access points, and link it with the new vlan?

Can anyone guide me through this?

Thx
Thomas

[JKnott]

@Tommyboy

You will have to use a VLAN for the guest WiFi. You set up a VLAN on pfSense, but I can't help with the ddwrt, as I've never used it.

Here are my rules, which allow access only to the Internet and pinging the VLAN interface.