I'm trying to setup Public-Access WiFi using our Cisco WAP321 access-points.  I really thought there would be more documentation on this, but I couldn't find much.  If you know of any documentation or can provide any help on best practices, it would be greatly appreciated.

     Essentially, what I want to know, is the best practices and settings for enabling a guest network with no access to other devices on the network.  Hopefully the WAP321 will also act as DHCP for the guest network.  The other major question is will the WAP321 NAT traffic for the guest network, since we'll need to setup some basic policy-based routing for the guest network to route traffic out of our redundant Comcast internet connection.