Got the guest access working by just changing it to VLAN 1 which isn't acceptable.  You're right though.  These are supposed to give "highly secure guest access".  Not sure how secure it is being on VLAN 1.  I need the guest access on a entirely diff...

I'm having the same problem.  Followed the instructions from Cisco exactly and it's not even working at all.  I simply want to have a guest access SSID that is on a separate network that can only go to the internet and NOT be able to access our main ...