Upgrading Network Gear - Need Help and Ideas

Configuration
1

Hi, I am finally going to have to upgrade my home network… new router, switches, and wifi access points. Planning to use TP-Link Omada network gear. (Currently Asus XT6 mesh network). I have Metronet 1G fiber for my provider.

Need ideas and suggestions on ways to approach this to minimize disruption to my Home Assistant and home automation network in general. I have …

Home Assistant running on an Intel NUC (fixed IP address)
Both Zigbee and Zwave Devices
Sonos sound systems
Lutron plugs and switches
Hue Lights
Nest/Google Wifi Cameras (8 total)
and more

Right now, my entire home network is on “1 VLAN and Wifi)” … I am planning to setup a few different VLANs.

One will be a “legacy VLAN” with the same IP subnet, wifi SSID and password. This will allow everything to work temporarily until I can setup the rest of the network and migrate things over.

I plan to setup an IOT VLAN for home assistant and an IOT Wifi to go with it. How do I change the fixed IP address on the HA NUC? And if I change the Wifi, will I have to “re-bind” all the HA devices, integrations, etc? (sounds painful)

Also thinking of setting up a separate VLAN/Wifi for the security cameras

Of course a guest network/VLAN/Wifi for guests. And will have a new main/admin VLAN

Should I put the HA NUC on the main/admin VLAN, but the wifi devices on a separate VLAN and wifi? Or put both on same VLAN? I’ve read you want to isolate your IOT network in case of hackers…

Regardless how do I change the HA NUC fixed IP?

In the end, I am looking for suggestions, or links to the best ways to do this. Simplicity is my goal.

Thanks to everyone in advance.
GW

2

Three vlan

MGMT- servers, switches AP
This doesnt need to be vlan.

IOT- devices that need network but do not need internet. You can completely block the devices sending out but allow devices in to retrieve data or change state. This is cameras, wifi switches and ither devices

GUEST- really everything else. Roku, TVs, devices that need internet but need limited access on local network. Blocked from IOT but allowed to specific ports on server in MGMT vlan.

I recently start use opnsense. I like it a lot.

I do not set fixed IP on device. I set fixed IP in router and manage it there. I had network issues in past and lost ability to connect devices when i became unable to access addresses in vlan. With devices set to dhcp it allowed me to temporarily bypass vlan to correct my issue (router failure).