Hi everyone, I'm new enough to networking but always learning. I'd like to ask for advice on best practic for a home / Small business network.

I'm currently using the following hardware.

Teltonika RUTX50 Router

TL-SG1016PE Switch

Unifi UNIFI U6-LR Access point ( may be changing to a TP-Link EAP235-Wall)

Ethernet connections for home / work laptops, TV, etc

I'm trying to achieve secure network segregation between home, work, guest, iot devices with the use of VLAN's.

I'm not sure of the best approach.

Do I setup VLAN's on the switch and then a seperate connection from each VLAN to the router. Also seperate access points for home and guest wifi?

Or do I setup VLAN's on the switch and then a trunk conection to one port on the router and a trunk connection to one access point with SSID's for each VLAN?

Any help or advice would be greatly appreciated.

Regards Padraic.