Hi everyone

Let me first start by admitting that I am probably in way over my head here.  I have been dealing with issues with network coverage and I spent some time with my local IT person and he recommended me to get the hardware that I have now.

I have created a visual of what I am trying to setup, and I am not sure how to do what I am looking for.  Any help would be greatly appreciated.

I have a TL-ER6020 VPN Router supporting 2 EAP225 Access Points.  I can get my primary network up and running on 2.4 and 5.8 GHz, and I can get a secondary network up and running on only 2.4 GHz for the devices that aren't smart enough for the 5.8 band.  What I would like to do is setup a "Guest" network that cannot see any of the devices on the other 2 networks but can get to the outside world.  Also, I am running into an issue where some game consoles are stating that they are a "NAT Type C" and therefore cannot get to the online gaming servers (and the kids are starting to revolt).  I think I need to setup a WiFi in a DMZ area, but I cannot get it to route to the internet.  Due to the way my house is built, if I use 1 access point there are major holes in the coverage, so I need to have both access points running the main networks (the DMZ can be just 1 access point).  I have looked for tutorials and have not been very successful.

Thanks for your help!