We are currently dealing with exactly this issue as well. We will have an antenna on the wall/ceiling on each of the two floors, which will be connected via POE. In the basement, there will be a cabinet with a patch panel and the 24-port switch, which will handle DHCP, POE supply, as well as the control of the VLANS. There are at least 2 LAN connections in each room. Additionally, a firewall will be placed between the [Unitymediabox] and the switch. The goal is that only the components that are supposed to communicate with each other actually do, and that only the components that need an internet connection have one. We are still in shell construction, but at least the IP address concept as well as the basis of the documentation are already established.