generally for wireless dot1x roaming, the recommendation is to have a single VLAN for best user experience, so the client does not go through DHCP discover/request/renewal that impacts roaming.
------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------