Hi,
do you solve the problem? You need to separate all the networks.
Adoption via fix ISP IP can be done like internal, DHCP, DNS or static AP entry (pre-staged).
If you test it with one Switch, you can create VLANs to separate all traffics between VX, internal network an AP network.
BR Timo