Hi Rob,
If you want to seperate home and guest users, you need to use VLANs and different subnets. I don’t have the 1941W with me here but the configuration for two VLANs should look like this, I used VLAN70 and VLAN80:
dot11 ssid VLAN80
authentication open
guest-mode
vlan 70
exit
dot11 ssid VLAN80
authentication open
guest-mode
vlan 80
exit
These are the SSIDs for VLAN70 and VLAN80. Now we need to apply both of them to the radio that you want to use:
interface dot11radio0
ssid VLAN70
ssid VLAN80
mbssid
the “mbssid” command tells the access point to use multiple SSIDs. We also have to create sub-interfaces on the radio and assign the VLANs there:
interface dot11radio0.70
description VLAN70-USERS
encapsulation dot1q 70
bridge-group 70
interface dot11radio0.80
description VLAN80-USERS
encapsulation dot1q 80
bridge-group 80
And we need to create additional sub-interfaces on the internal Gigabit link towards the router:
interface GigabitEthernet0.70
description VLAN70-USERS
encapsulation dot1Q 70
no ip route-cache
bridge-group 70
interface GigabitEthernet0.80
description VLAN70-USERS
encapsulation dot1Q 80
no ip route-cache
bridge-group 80
That’s what you have to do on the Access Point. On the router side you also have to create the BVI interfaces for VLAN 70 and 80. Also, don’t forget to create VLAN 70 + 80 on the router and configure a DHCP pool for each of them.