Double check your settings, what you have should work.
Make sure the clients don't have an old "profile" that lets them connect to the non-guest network.
Reboot the clients as well as the router. The clients might be caching some old information.
The DHCP addresses are correct. They have no bearing on whether there is access to the LAN or not.