Our Pfsense firewall at HQ has each of the 3 VLANs (Staff, publiic computers, and public wifi) setup with its own subnet and hands out DHCP for each one.

I just bought a GS110TPv3 with the intention of setting up VLANs to eventually segregate WiFi traffic from a common UniFi WAP, but first I wanted to test with just a plain ol' laptop and Ethernet ...

Unifi's routers also offer full zone-based firewall configuration, which work in tandem with the VLANs to help keep your network protected.

Delivering the full Unifi application stack, alongside Wi-Fi 7, the Dream Router 7 transformed my entire home networking setup—though there is one thing I wish it did better.