Ubiquiti Dream Machine VLAN Setup

I’m ready to segment my Ubiquiti Dream Machine into four distinct networks so traffic stays tidy and secure. One of these networks is dedicated to my IoT devices; the remaining three will be named once we start. I have the exact IP ranges for each segment, but I haven’t settled on VLAN IDs yet, so I’ll lean on your expertise for sensible numbering.

Here’s what I need you to handle:
• Create four VLANs inside the UniFi Controller and bind them to matching wired or wireless networks as required.
• Apply the IP ranges I provide and confirm DHCP is handing out addresses correctly.
• Add straightforward firewall rules that keep every VLAN isolated (especially the IoT one) while still allowing each network to reach the internet.
• Export or back up the final configuration and give me a brief write-up of the steps, chosen VLAN IDs, and rule summary so I can reproduce or tweak the setup later.

I’m running the latest UniFi OS, so please be comfortable with the current interface and best-practice security for Ubiquiti gear. If you spot anything that could be optimised, feel free to suggest it before locking in the changes.