Setup a VLAN and configurations over network switches and wireless Openmesh WiFi with multiple SSIDs

Note; the scope of this project has additional tasks. Please review and add cost to the project if necessary. Also please be advised of the time I am available. We are on Easter Standard Time. We are currently upgrading our network and require IT network assistance. The prospective freelancer must have extensive knowledge of VLAN and familiarity of the below mentioned hardware. Access to our system will be via Webex. We will also require a “how to” document for any of the required setup procedures or device settings. Our current network consists of two main switches, Ubiquiti EdgeRouter, HP 5900 and HP 3500yl (POE) , Trendnet TI-PG541 switches on the shop floor with web relays and cameras and an Open Mesh access point system. There is a Rasberry Pi running PiHole and Domoticz. There is also a Windows Server that is running Wingate proxy server. I need to setup a functional VPN with this system (have purchased the VPN add-on for this proxy server): Server running Wingate Proxy / VPN server Wingate is what we use for our proxy for our LAN computers. It is fully functional but I need configure the VPN for operation. I am new to VPNs so I need this working and secure. It is a simple VPN plug-in so you must check [login to view URL] to familiarize yourself with the configuration Ubiquiti EdgeRouter 8 port model with the first 4 ports used for individual VLAN traffic Port 0 for internet Port 1 wired to VLAN 1 (default), port 2 wired to VLAN 2, port 3 wired to VLAN 3 Port 4 wired to proxy server directly OpenMesh SSID 1 – Local traffic. The Gateway access point is wired to VLAN 1 or the default VLAN of the HP 3500yl switch. SSID 2 – IOT traffic set to VLAN 2 SSID 3 – Guest traffic set to VLAN 3 HP 5900af Update to latest firmware Enable Telnet Administrator name and password update Utilize the QSFP+ 40 GbE ports to connect to two servers in a ring setup SFP+ 10 GbE ports are used to connect to the HP 3500yl switch – trunk needed? HP 3500yl This switch is used for our VLANs. I have two SFP+ 10 GbE ports attached to the HP 5900af switch – trunk needed? VLAN 1 – Local traffic (default VLAN) VLAN 2 – IOT traffic VLAN 3 – Guest traffic Trendnet TI-PG541 These units are located on shopfloor in multiple locations Each unit to have the following configuration Local network attached to workstation and machine station VLAN to IOT for web relay and camera Raspberry Pi This has PiHole installed –how to implement this into our network and get functional Domoticz home automation software to control relay system and cameras This setup is supposed to achieve the following: Create VLAN for Internet Of Things devices on multiple switches Openmesh Access points are to allow access to 1. Internet for guests, 2. Internet for users, 3. Local access to network for wireless users. Switches are to be updated and configured with most effective and secure settings The PiHole DNS system to be also added and configured to be operational on all internet traffic. A VPN is to functional to allow my offsite computer have access to our office. This VPN is to be established using our proxy server. Work provided on this system 4pm-9pm EST or on weekends only as we cannot have any downtime on production.