I'M sorry, but I'm not really sure if I understand that.
One SSID should see for everybody. So I need to set-up guest mode.
Additionally I want to have 2 SSID's which are only seen if I configured it in the Client.
I mapped to each SSID one VLAN and activated guest mode on the one SSID I want to see for everybody.
But the others or not really seen by the clients.
I configured now "broadcast as backup SSID", is this the right way...
What is MBSSID?
Is broadcast = seen for everyone..
If it is to stupid ;-) oder to much to explain just tell me where I can read that.
Your configuration looks fine. You sure made your subinterfaces and bridge-groups a bit confusion though :) Also, you should use channels 1, 6, or 11 for your Dot11Radio0 interface, it looks like you have 7 configured.
As for the guest-mode issue, the AP should be sending the Guest SSID name in its beacons, so if you aren't seeing them then I'd try resetting the access point or trying a different device. Some supplicants get stuck when searching for a public signal for some reason. Try a different laptop with a different supplicant, if possible, and see if you can see it after all.
VLAN 40 might be a bit messed up. You have the native on a different bridge-group on the wired side than wireless. you should place the bridge-group 1 under Fa0.40 for consistency's sake.
Best of luck. Again, this doesn't look like a configuration issue.