Your local VAR or Ruckus SE would always be happy to discuss design questions
and help insure you have products to provide adequate coverage. In a basic design,
you want an untagged VLAN for management, from your Central Office to each Site,
and one dedicated Client VLAN for each, both at your CO, and one extending to each
Site. The ZD and APs use the untagged management VLAN, and you put clients on
the tagged VLANs associated to each Site.
You can define two AP Groups on your ZD, one for each Site. You can define two
WLANs, each tagged with that Site's unique client VLAN. You can advertise only the
Site1 WLAN on Site1 APs, and only Site2 WLAN on Site2 APs. If you have an AP in
the office, you could advertise both Site WLANs, and maybe a Management WLAN
(untagged) for your Admin access/testing/etc.
Does that help you to envision your LAN switching requirements?