Segmentation and security
Multi-VLAN design (corporate, guest, BYOD, IoT, cameras, access control), firewall rules between segments, IDS/IPS on the gateway, WPA3 on new SSIDs, guest captive portal, and RADIUS integration where required. Cameras and access on their own VLAN with tight rules.

