What is the best way to assign users different vlans/subnets? We want to have different subnets for different groups of users. Users in the active directory IT group get assigned subnet A and that subnet has more permissions on our corporate firewall than a user in the standard user group. Standard users get assigned subnet B and fewer permissions to things through the corporate firewall.