I have the SRX 240H. I would like to create one WIFI vlan, access points will be connected to it. But that students and staff and teachers will connect via wifi - I would like to separate it somehow in order to be able to properly manage them and grant permissions or to prohibit access to something.
Would it be a good idea to create one vlan with an address pool, e.g. 192.168.80.0/22 which will give me 4 subnets (192.168.80.0/24 192.168.81.0/24 192.168.82.0/24 192.168.83.0/24) and then allocate in DHCP according to:
192.168.80.0/24 - students
192.168.81.0/24 - teachers
192.168.82.0/24 - employees
192.168.83.0/24 - guests
And then I could apply the appropriate per subnet restrictions.
Unless I think wrong and there is another solution to this problem to make it safe - something like VLAN in VLAN ...
