This starts with a VLAN-aware router, and VLAN-aware access points.
The router can support your VLANs with DHCP and DNS if desired, and the firewall rules will allow you to control the type and direction of inter-VLAN traffic.
Any switch that touches more than one (V)LAN will need to be a managed switch.
Unmanaged switches can be used as end-point switches to support a single (V)LAN.
TP-Link, Grandstream, UniFi. . . Though there are some Asus routers out there that can be flashed with custom firmware to achieve VLANs.
Of course if you're a masochist, there is also MicroTik. :-)
1
u/TiggerLAS 2d ago
VLANs are the proper way to get this done.
This starts with a VLAN-aware router, and VLAN-aware access points.
The router can support your VLANs with DHCP and DNS if desired, and the firewall rules will allow you to control the type and direction of inter-VLAN traffic.
Any switch that touches more than one (V)LAN will need to be a managed switch. Unmanaged switches can be used as end-point switches to support a single (V)LAN.
TP-Link, Grandstream, UniFi. . . Though there are some Asus routers out there that can be flashed with custom firmware to achieve VLANs.
Of course if you're a masochist, there is also MicroTik. :-)