I generally work with software instead of networking so please bear with me.
I have a good understanding of simple network principles like subnetting, DHCP, DNS and the like but have a slightly more complicated task at hand involving VLANs and a Cisco router.
We currently have a simple network architecture which involves a rack-mounted fibre termination point(?) that then has a RJ-45 cable to a Cisco 4300 series router. The router is then connected to a Linksys Velop which acts as a wi-fi access point and a DHCP server for our network.
We have a new team joining our building and we'd like to move them onto their own subnet, isolated from our devices. To do this, we have purchased a managed switch (Netgear JGS524E) where we're creating a couple of VLANs and tagging the relevant ports to each VLAN. Then, for each VLAN, we'd like to rate limit the Internet traffic so it's fair for all users.
The 2 questions I need help with are: 1. Once I have the VLANs created on the managed switch, what needs to happen on the Cisco 4300 for it to act as a gateway for both VLANs, but to also enable rate limiting to the gateway? 2. Where should we be doing DHCP for the VLANs? The Velop seems like an unusual place for this and will only be able to do 1 of the networks.
Lastly, one of the things I'm struggling with is how the Velop communicates with the 4300 as I cannot see the 4300 anywhere on our local network (192.168.1.x). Instead, the Velop has the Internet settings set up as a static IP address and a gateway which are both public internet IP addresses provided to us by our ISP. I thought routers have to have a local IP and a remote IP and handle the routing within the router, just like most home routers. i.e. a router will usually be 192.168.1.1 and will have a public IP address assigned to it as well.
Really appreciate your help with this!