Hi

I have 3x Deco M5 currently in router mode but am in the process of setting up a pfsense rig, so intend to setup AP mode.  I'd like to know if it's possible to setup 2 SSIDs (i.e. the guest WLAN and regular WLAN) to be on 2 separate isolated networks, either mapped to 2 physical ports or mapped to 2 VLANs on a trunk?  I'd like to have my WiFi smart devices on one WiFi network and control what they can talk to with pfsense, separately from my main WiFi.

Thanks