Hi MarkPi,
A couple of factors to consider would be, where you host your DHCP service from and how many access points you have and how they are connected together, plus the additional access point’s capabilities. Can the additional access points handle VLAN traffic, and if they can’t, you’ll have to route all VLAN traffic to the additional access points, losing your ability to connect to the original LAN via the additional access points; as all SSIDs, if multiple, on those APs would now be placed on the same new VLAN LAN(subnet).
If you’re hosting the DHCP service and the wireless access point (with multiple SSIDs of course) from a single Vigor router, it’s quite straight forward.
As suggested, to get the clients of a particular SSID to use a dedicated WAN would require subnetting or rather VLANing which will give you different subnets if you require - and you do, the VLAN will make the subnetting much easier too, of course you could manually configure all your wireless client’s IPs, but who would ever do that nowadays.
Once you have created a VLAN and assigned your chosen SSID to that VLAN, you can then assign a new LAN(subnet) to that VLAN.
In the ‘Load-balancing/Routing Policy’ page you can then specify a ‘Source’ subnet and choose the WAN to be used for that subnet; you can also choose if they failover to the other WAN or just lose internet connection altogether if their WAN fails.
If you then want the two LANs (original and new) to pass traffic between each other, you need to tick the inter-LAN box for the two LANs you want to allow traffic to flow between.
If you have additional access points with VLAN capabilities, you can assign the VLAN ID(s) to the SSIDs on those APs to whichever VLAN you decide. You would need to add the port connected between the external AP(s) and the Vigor router to the new VLAN assignment as well though, and if multiple VLANs are configured on that AP too, just add those VLANs to that same port assignment in the router’s VLAN page.
The other advantage of using VLANs is, you can now use the firewall to block or pass traffic between the two, or more, VLANs that are inter-LAN connected. This will also isolate your two or more networks, protecting each of them from any rogue devices that have gained access to either of the two or more separated networks. Broadcast packets will also be isolated to the network that hosts the device sending the broadcast packets; reducing unnecessary packets flooding all networks.
VLANing SSIDs is great for isolating IOT devices as well.
