Is more like:
cable modem - HW firewall --- WEP AP
\---------- HW Firewall - non business WPA AP
\--------- HW Firewall - business WPA AP


I also have separate DMZs for other stuff (external SSH connections etc)...I think 5 DMZs and 2 protected internal networks

the 2nd and 3rd firewalls come from the first one - blimming whitespace removal!