LAN - WIFI - VLAN

Good morning, sir,
I'm new to XG sophos configurations.
I would need help.
The configuration I want to deploy is as follows:

1º Have a wired network (LAN), for users.
2º Separate the WIFI from the LAN. Where the users that connect by means of wifi only have access to Internet.
To generate WIFI an AP TP-Link will be used.

Thank you very much.