Firewall/NAT

Ok I am new and have no idea if monowall can do this

1 I have a wireless AP that can do multi ssids
2 it can also do DHCP ,but the DHCP hands out the IP'S in the same subnet
3. THe wireless can also do vlan tags

What I a trying to do is

When a guest signs on ssid guest they will go right out to the internet and not see my Lan 10.0.0x subnet
when a private signs on ssid private they get the subnet of 10.0.0.x and also get internet access

I have no idea where to start , I don't want to use monowall to actualy firewall our net work but more redirect  my wireless clients

I attached a picture of current install of monowall

If you can configure one VLAN per SSID you can setup the VLAN's on m0n0wall and do what you want with appropriate firewall rules.