The simplest thing for you to do would be to purchase a GuestGate. This is a captive portal appliance, the size of an access point that adds some great security features for you wireless users and will segregate a private network as well.
It is around $300 USD, but it will solve your problem.
http://www.guestgate.comJohn