I'm using several wifi routers as AP's (RT-AC68U, R7000, and something else). All running tomato firmware. Upstream of these routers is a hardware firewall appliance (sophos utm). It handles all dhcp, dns, routing, security, and other network related tasks. Since I have no need for any routing or firewall functions within the AP's, all those functions are disabled. My question is, considering the above, will guest networks still work on the routers with dhcp and other tasks performed at the router, or should I configure configure the guest wifi via vlan. I would also like non guests wifi clients to have have access to the full network. This also brings up the question of whether wifi can even be assigning to multiple vlans like ethernet. Any advice how to proceed? Thanks!