The easiest way would be to create 2 SSID's on the IAP.
The GUEST SSID would be setup to use the internal DHCP server.
The CORP/INTERNAL SSID would use the DHCP service on the router.
The key to the GUEST SSID would be to block access to the INTERNAL network using an ACL on the configuration.
What version firmware are you on?