Guest network: go to WLAN > WLAN 2.4G > Multiple SSID. Check Enable on interface ra1, enter a separate SSID and password, and click Save & Apply. Up to 3 additional virtual networks per band are available.
MAC-based access control: go to WLAN > Advanced > Access Control. Choose Deny Access to block listed devices or Allow Access to permit only listed devices. Click Add to enter device names and MAC addresses, then Save & Apply.
Tips: You can also schedule Wi-Fi on/off times under WLAN > Advanced > Scheduler.