Instant On - Wired

Hi!

I have my ISP modem connected to a 3rd party WiFi Router (Mi 4A Gigabit Router 1 WAN, 2 LAN) with one of it's LAN feeding into the Port 1 of Aruba 1930 Switch (Locally Managed).

I wish to turn of WiFi in my Mi Gigabit Router and connect a second Mi Gigabit WiFi Router in "AP Mode" to the Port 5 of the 1930 and define VLANs within the switch to segregate and secure my IOT and IP Cameras from ingress.

My Workstation and Server are connected to the Port 2 and Port 3of the Switch via Ethernet.

Is this possible, or should I introduce a PFsense FW between my router and 1930 to get this done?

Any suggestions?

Current setup:

ISP Modem -> Mi Router (DHCP and WiFi On) -> 1930 Switch (No VLANs)-> Wired Clients

Expected setup:

ISP Modem -> Mi Router (DHCP On, WiFi Off) -> 1930 Switch [2 VLANS: VLAN20(1-4ports)VLAN30(port5)]-> WiFi AP(Port5) -> Wired Clients (VLAN20) -> IOT Devices (VLAN30)

Hi,

I shared this with my team and should have an update for you soon.