I am in the process of tighting up our local network VLANs and Subnets in order to place physical firewalls (sandwich) between some of our core network services (AD, DNS, etc...).
I am wondering about moving our APs to their own VLAN as well. This would be a non-routed VLAN and would end up being tagged on the controller side. I could not find anything on this topic so was wondering the pros/cons of doing this.