What security features do I need in an AP?

I want to build a network where one of the requirements is to isolate guests from each other as well as from the private LAN.

I assume this is called "Layer 2 isolation" although I don't find much discussion on the topic when googling around. At the moment I'm looking at picking up a couple Unify AP Pros. Is this possible? Having each guest in their own Vlan or at a minimum some way to block communications between wireless guests?