Finally got it figured out.
Here are my final steps:
Untangle:
- Network>Add tagged vlan interface. Set parent interface to Internal.
- Set 802.1q tag,
- specify IPv4 scope,
- setup DHCP config (all default settings)
- Create firewall rule
source interface is VLAN NAME
destination interface IS NOT Any WAN
Action Type: Block
Unifi:
- Create corporate network, enter gateway IP & Subnet from untangle vlan
- disable dhcp mode
- enable dhcp guarding, type in gateway ip from untangle vlan
- Create SSID in wireless networks, select network created from step 1
Thanks for your help fellas.