Many of the wireless access points and routers now come with guest based access. However, they place the users on the same network as the private network giving them access to everything.
Do I need a specific device that separates the two? Or do I need multiple devices and configure vlans
Best Answer
This depends very much on your specific situation. Generally, most enterprise access points these days will handle multiple SSIDs and tag the different SSIDs as different VLANs, which you can then route and isolate as you would normally. If you are dealing with smaller-scale equipment such as Cisco's "small-business" line, unless the device offers some way to configure multiple SSIDs into multiple subnets (such as OpenWrt does), you'd have to use multiple access points plugged into separate switch ports.