Network configuration advice

[Osirison]

What would be the best networking practice, I have:

Cisco ISR1100 series router

Switch 1 3560cx

Switch 2 2960cx

Switch 3 (non maneagable "means no Cisco" L2 switch for security cameras)

Accesspoint AP2802i

Router 192.168.0.1

VLAN 10 192.168.10.0 (Trusted Devices)

VLAN 20 192.168.20.0 (Guest network, internet access only)

VLAN 40 192.168.40.0 (Security Cameras, no internet access)

DHCP server for VLAN 10

DHCP server for VLAN 20

Router is the internet gateway

Switch 1 is the core switch of the network and is connected to the Router

Switch 2 is connected to Switch 1 (trunk, VLAN10,20,40)

Switch 3 is connected to Switch 1 (access, VLAN40)

AP is connected to Switch 1 (trunk VLAN10,20)

VLAN40 has lots of traffic (camera streams) I would like to offload this from the Router and route this traffic locally on Switch 1.

What would be the best way to configure the Router and Switch 1?

What device should be running the DHCP server?

Will it be a good idea to run the DHCP server for VLAN20 (guests network) on the AP instead of the Router or Switch1)

Any help and ideas are welcome!

Thank you all :) 

[Julio E. Moisa]

Hi,

What would be the best way to configure the Router and Switch 1? it could be a router-in-a-stick scheme, and the switch can be the root bridge for the vlans. 

What device should be running the DHCP server? It could be the robust device (better tech features) it could be the router. 

Will it be a good idea to run the DHCP server for VLAN20 (guests network) on the AP instead of the Router or Switch1) The guest vlan could be over a VRF to be totally isolated from the company networks, it will avoid any leaking from unauthorized users.