Noob Questions: Creating Guest WiFi for both 5 and 2.4 Bands separated and firewalled?

Hi all,

I've just managed to install 22.03 on an Archer C6 V2. I watched various videos in order to achieve the task in the subject, but somehow I am confused. What is the proper way to do this?

I'm guessing I have to create VLANs (devices) for both Bands and for each of them create an interface, right? Then I have to create under "Wireless" a new SSID for each Band and attach it to its interface.

Under "Firewall" I have to Create a new "GuestWiFi" Zone which covers the 2 interfaces, rejects Input and Forward but allows Output and allows forward to the wan Zone. Furthermore I have to create rules to allow access to ports 53 67 and 68 (DHCP and DNS).

Am I getting this right, or am I missing something here?