@bleo
You can set one VLAN for each SSID (or per Network). I have such a setup where I put my IoT devices on their own VLAN and then set the Network Access to Restricted in the configuration, which isolates those devices from my other private networks.
Quite easy to setup too if you are using the 1930 Instant On switch.