WNDAP360 - How to configure a Guest Access?

[Euquinimod]

Our Access Point (WNDAP360) works well but I would like to configure a restrictive access for our visitors. With the present configuration, they access to the internet but also to our internal network and this is not useful and not sure.

In the Reference Manual, it is written :
"You can configure combinations of VLANS and BSSIDs (security profiles) with stronger or less restrictive access security according to your requirements. For example, visitors could be given wireless Internet access but be excluded from any access to your internal network. For information about how to configure BSSIDs, see Configure and Enable Security Profiles on page 42."

This is exactly what I want but on page 42, I can't find clear explanations about this kind of configuration. I configured two BSSID (one for full access, one for guest access), with different VLAN ID (static VLAN ID). I don't have a Radius Server but I hope it is not essential. We had before a guest access with a Belkin Modem-Router and it was very easy to configure...

Thanks for your help.