Best sub $200(US) AP with public/private separation

[WigglesTheHoly]

As the title states, I'm looking for the best sub $200(US) AccessPoint with public/private separation. Normally I'd just run an access point off different ports on a layer 3 switch however, I'm doing this for a small business in the area, to help secure them up a bit more. We just put in their first firewall (pfSense for budget reasons) and moved them off windows xp. (yikes)

 

Thanks for any and all input. 

[brwainer]

50 minutes ago, WigglesTheHoly said:

As the title states, I'm looking for the best sub $200(US) AccessPoint with public/private separation. Normally I'd just run an access point off different ports on a layer 3 switch however, I'm doing this for a small business in the area, to help secure them up a bit more. We just put in their first firewall (pfSense for budget reasons) and moved them off windows xp. (yikes)

 

Thanks for any and all input. 

the go-to brand for budget enterprise-ish/SMB APs is Ubiquiti - I'm fairly sure that all of the Unifi APs let you do 4 SSIDs, each one on its own VLAN. Separation of the traffic beyond the AP is reliant on your proper setup of VLANs in the switch(es) and router(s) of course.

 

I am partial to Mikrotik, and you can configure a Mikrotik device to do anything - in my house I have 4 SSIDs on 3 APs (using CAPsMAN), each one is separate (SSID attached to a VLAN, just like Ubiquiti and everyone else). There are a lot of models to choose from, the ones I would recommend you look at are:
https://routerboard.com/RBwAP2nD

https://routerboard.com/RBwAPG-5HacT2HnD

https://routerboard.com/RBcAP2nD

https://routerboard.com/RB962UiGS-5HacT2HnT

With Mikrotik RouterOS, you can literally configure any device to do anything, but I can tell you that the hAP AC really is great when configured as just an AP/switch - and the others I linked are the same basic guts. If there's going to be more than 2 APs, I recommend getting another Mikrotik device to run CAPsMAN.