Cisco :: Wireless Access Point AP541N-E-K9 Setup

I have installed the following wireless access point on our network:
 
-Product Identifier: AP541N-E-K9 
-Hardware Version: V01 
-Software Version: AP541N-K9-2.0(0)
 
I have created 2 VAP's and give each one an SSID. They both have the same VLAN ID. I have setup as follows:
 
1) The first VAP I would like to give internet access and access to our internal network shares.
 
2) The second VAP I only wish to give internet access and no access at all to our internal network (for guest access). I am also using HTTP redirect with this.
 
how can I achieve the setup in number (2)? This is to give internet access, but not share the internal network.