Is your clients on wireless on the guest wireless by chance or are they all on the same subnet?
If same subnet, after you ping a host, does arp -a show the mac address for the host?