Need suggestion for a setup to provide automatically IP addresses with isolation in between.

Hey everyone, I could appreciate some talk and help with this scenario.

I want to create a three-point WiFi network with 50-100m in between each device. For now at least, may increase in range in the future. Planning on using three Ubiquity LocoM2 devices or something similar and provide wireless internet access.

When clients connect to the said network they should get an IP address via DHCP but due to security concerns, I need to have them isolated from each other.

Each client should seem like in different subnet and without possibility to scan or detect other devices connected to the same network.

The whole plan is like this:

• The network can be on 2.4GHz and/or 5GHz, dual-band will be excellent but for the initial testing only on 2.4GHz would suffice.
• Client devices must be isolated when connected.
• The AP's will have a full line of sight visibility, there will be no interference.
• Some bandwidth limit or burst limit, so one client couldn't take up full utilization of the link.
• Thinking about 10Mbit/s U/D for now, and around 20 clients on average.
• VPN connection for central monitoring and configuration.

Can the basics of guest zone/network suffice for this scenario? I have to mention that I have limited experience with larger-scale wireless networks.

Here is my initial diagram, please chime in for corrections.

https://i.imgur.com/Wog0ViG.png

Thinking about the cabling and ethernet length limitations, also I may be able to omit the switch if the supplied router will have at least 4 ports.

Is all this plausible, am I on the right track?

Thanks