The controller is configured with 2 VSC's (Guest.wifi, Office.wifi)
Option A (Not using the WAN Port on the controller) Connecting the LAN Port of the controller to a managed switch. This connection trunked with 2 Vlans (Guest Vlan, Office Vlan) The Guest.wifi VSC is assigned to the LAN port of the controller and bound to the Guest Vlan. The Guest Vlan receives DHCP from the Firewall. The Guest Vlan is configured to have access to the Gateway for internet with no other network access. The Office.wifi VSC is assigned to the LAN port of the controller and bound to the Office Vlan. The Office Vlan received DHCP from a server on the network. The Office Vlan is configured to have access to the Gateway for internet and shares access with other wired network Vlans (Production, Administration, Management).
Option B (Using the WAN Port on the controller) Connecting the WAN Port of the controller to the modem and the LAN Port of the controller to a managed switch. The Guest.wifi VSC is Assigned to the WAN port of the controller. The Guest.wifi receives DHCP from the controller with access to the internet via the WAN Port. The Office wifi and Vlan networks have no changes in this configuration and are connected through the LAN Port receiving DHCP from a server on the office network. There is no "Guest Vlan" in this configuration since no Guest.wifi traffic is routed to the switch.
I am considering what option is better and why...