Providing internet for multiple companies in the same building.

Hello Guys,

this is my first Post and i hope you can help me out. Sorry for my english in advance, it is not my native language.

I work for a small MSP as the only Sysadmin / Networking guy. We got two apprentices, but they do not Count.

Now we got a new contract to manage a form of "campus" and Provide internet for a couple companies.

We are the only ISP with our own fiber connection, with a public IP Range.

Every Network Port in the campus is connected to a series of managed HP Aruba Switches Leading to our fiber connection with a Sophos XG in Front of it.

The Question is now: How do i provide those companies with their own IP address, seperating them (vlans?) from other companies. Secure each one of them and the campus network (own Routers with mac authentication?) and keep it all easy to deploy and manageable.

As an extra: the Rooms and places of those companies can easily change and switch.

Changing Hardware is still possible, but our budget is very limited.

Maybe you got some ideas and thanks in advance.