Acces Point in another internal layer of forefront

I would like to install a wifi access point for some users invited to use the internet business without having access to my internal network, I have seen some references to software "captivate" Company "collective software", and an article explains in detail, but the question is that I have 3 cards in the server, two ISPs and one for the internal network and I would like to use the same internal network with another layer to the guests.

The layers would be:
Layer 0. 192.168.0.0 (Guests)
Layer 1 192.168.1.0 (Internal)
Layer 2 192.168.2.0 (WAN 1)
Layer 3 192.168.3.0 (WAN 2)

The clients on layer 1 are configured like this example

1. Ip machine client 192.168.1.50
2. Mask 255.255.255.0
3. Gateway 192.168.1.103
4. DNS 192.168.1.100
5. DNS2 192.168.1.99

FOREFRONT MACHINE CONFIGURATION

NIC 1 (INTERNAL)
IP 192.168.1.103
MASK 255.255.255.0
GATEWAY -
DNS1 192.168.1.100
DNS2 192.168.1.99

NIC 2 (WAN 1)
IP 192.168.2.1
MASK 255.255.255.0
GATEWAY 192.168.2.1
DNS1 -
DNS2 -

NIC 3 (WAN 2)
IP 192.168.3.3
MASK 255.255.255.0
GATEWAY 192.168.3.1
DNS1 -
DNS2 -

My persistent static rules on forefront are: (anyone can tell me if its good?)

192.168.1.0 mask 255.255.255.0 192.168.1.103

192.168.2.0 mask 255.255.255.0 192.168.2.3

192.168.3.0 mask 255.255.255.0 192.168.3.3

0.0.0.0 mask 0.0.0.0 192.168.2.1

0.0.0.0 mask 0.0.0.0 192.168.3.1

The two Dns are in layer1

Could someone help me with the configuration of static routers to work properly the layer 0?

I have DHCP on the Layer1 (192.168.1.101), in the same machine is an sql server which runs from clients inside the layer 1, I have to create another dhcp scope on that server or i have to configure another dhcp machine?

Thank you.