I would like to add a question to this thread.
I have 3 VLANs, VLAN X and Y are separated but VLAN Z will allow different "partners" to get access through CPPM Guest and CPPM will return the proper user role to the controller depending on the crendentials.
I am at a loss on how to separate the users from Role A on VLAN Z from Role B on VLAN Z. They share the same IP space...