If you've got the LAN ports and SSID1 in a separate VLAN from SSID2 then that should work as you want it to, just make sure the router's web interface is secure and that should be fine

Thanks Voodle, really appreciate the reply.

M.