I started using Untangle for the kids WiFi; I run it in a VM on the kids VLAN. It's not free, but it has a very admin friendly web UI, it works well, does SSLstrip, and I decided that at $50 a year, I am not going to waste my time endlessly cobbling together mediocre solutions myself.