The last question.
AP ------ > Controler --------> Switch -------> Router -------> Internet
A customer use SSID GUEST for internet:
Between AP and controler is on the vlan 10 (the default vlan)
Betwenn controler and Router is on the vlan 20
This is correct?