Brig

The above configuration is fine. Are you using a ZoneDirector to manage the wireless network? something you may have missed when you set up the Guest SSID. Did you select 'Guest access' as the type? doing so automatically fully isolates the SSID users from the rest of the network, therefore you'd be unable to ping the VLAN interface, only the ZoneDirector itself.