Wireless Access, Multiple VLAN's

I have a client that has a "business incubator", consisting of a 1 office complex with 8 separate businesses within that office complex.  We would like to segregate each individual office onto their own subnet, but still be able to share one business class multi function printer.  This client will be sharing one internet connection across all networks, and would like to separate network traffic between different businesses, so that business "a" cannot talk to business "b".  This customer will also require wifi access for these individual businesses, so we are thinking of utilizing a layer 3 switch and just creating multiple vlans to accomplish this, but was looking for a second opinion on other solutions.
Steven BlackAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

VLANs would be the best approach. I would create 9 of them though: one for each business, and one for any resources that are shared across all businesses. You don't have to get a L3 switch, but you do at least need either a managed switch or a smart switch (lower cost option).

Your title references wireless, which I see no mention of. Did you want to have each business be responsible for their wireless or are you providing those? VLAN capable wireless access points would be helpful as well.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
How do you plan to handle authentication for the wireless? If you use RADIUS you may be able to assign the VLAN from the RADIUS server, depending upon which credentials are entered. Otherwise use multiple SSID.

You certainly need L3 switch. Put in access list on each VLAN so it can only access the printer (on its own VLAN) and the internet.
Aaron TomoskyDirector of Solutions ConsultingCommented:
Yes you need an L3 device, you could use the router and have only layer2 switches, but layer3 switches will probably be faster, stackable, and reduce load on your router/FW
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Wireless Networking

From novice to tech pro — start learning today.