Separate VLAN for infrastructure ( or is it wise? )

Question

Hello there, 
 I consider a network consisted of two VLANs ( one is solely wireless and other is mixed ) . I also want to prevent these VLANs from accessing network infrastructure ( switch, AP, NAS etc ) but not sure how to handle it. Should I treat them as untagged or is it wise or possible to assign separate VLAN to infrastructure ones ( and how to do in case )

dirkkotte · Accepted Answer

i would use VLAN with tagging to split Network-Segments. 
 VLAN without tagging means you connect one cable for every VLAN to the firewall. 
 Every segment has its own IP-Subnet, is routed over firewall and controlled by firewall. 
 If you use VLAN Tagging, you have to configure this at the Switches too.