Why can Guest network still access my private network?

Hi, I followed the Wiki page to setup a Guest network and it seems to be a pretty straight forward setup, all I needed to do was to create a virtual interface (wl0.1) and then add a DHCP for wl0.1

This setup is supposed to isolate my private network from Guest network but for some reason the connection on the Guest network  can still access all my resources on the privite network side.  What have I done wrong? 

My private network is in 192.168.1.* range and Guest is in 10.0.0.*

Thanks,

Brian