Configure Omada Controller guest SSID with VLAN isolation and captive portal to secure public Wi-Fi access.