BR200 - GS728TP - WAX214 and VLAN Routing/Switching

I do not have a method to diagram the topology. It is best described as "star". Every device has an ethernet cable from the switch to the device. Hard wired devices, 2 Internet phones, 9 Cloud managed door locks, 1 PC, 2 Open Mesh OM2P access points (Cloud managed, they are tied together and have Internet access)

I will add that I have successfully got all 3 SSIDs to connect to the internet. In the BR200 I created 3 subnets and assigned an SSID VLAN to each of the subnets. This works but it limits me to only 3 SSIDs as the router will not let me add more than 4 subnets. Not desireable in my application as I cannot add the 4th SSID and keep each SSID from having access to the others. Nor will I be able to add another AP to provide more SSIDs (The network is installed in an office building with multiple businesses.)

I figured the problem was in the router because I took the AP out of the GS728TP PoE managed switch and plugged it into a dumb PoE switch GS305P and still had no Internet access on the SSIDs assigned to a VLAN.

I did set traffic rule to and from the WAN to each subnet but that did not get the SSIDs to the Internet. Selecting the router as the DHCP server for the subnet did the trick.

Long term we will get more clients in the building and each will need their own wireless SSID with Internet access. Most use wireless printers so client isolation is not an option. And we must restrict access of wireless users from the building LAN.