There are 3 main profiles that we currently use depending on what the design is (corp-wired, guest-wired and air monitor). All the authentication of users is provided from the CPPM servers.
So the separation of guest-wired profile and, corp-wired profile can be done on one of the 2 ports except for the part 0 which is used for uplink to the internet. Is that what you're trying to say?