I have the following networks Wired local 2.4 local 5.0 guest network for friends and family (guest 2.4 index 1, access intranet. From there enable access intrant for that new guest network profile to all listed vlan's and main lan Then on the two other guest network profiles (asus_guest and asus_iot), enable access internet to the printer guest network pro vlan Then test if that accomplishes what you are trying to do.
OPEN