multiple nocat nets on single gateway and more, is it possible?

I am interested in setting up a single Nocat box to serve as access
and route point on seperate networks with seperate firewall rules and
routing depending on access.  One network will server to allow a wifi
network access to the public inet, another to control access for a
group of ethernet jacks around my building.  I am completely green to
the concept of a nocat box and am wondering if nocat and nocatauth
will suit my needs or if anyone can suggest what might.  I have
already looked into horatio and spinach and neither seems to be quite
what I need. Here's how I envision things working:

I will have a nocat box with interfaces (both physical and virtual)
sitting on multiple private networks (one of which will hold a
nocatauth server) and one interface connected to a public network
(cable uplink).

One interface on the box will be attached to a 802.11g access point
requiring an encrypted key for access.  I want this network to run
through a nocat open gateway on the box requiring acceptance of a
"terms of usage" webpage which in turn allows users access to the
public internet but not to any private networks touching the nocat
gateway.

The other nocat interface will be connected to via a vlan network to
multiple ethernet ports in the building.  For this network, I want to
require that users authenticate via ldap to gain access to either a
combination of private networks and the public internet, or just the
public internet alone depending upon priviledges I grant per user.

Is this possible with nocat on one single box?  Will I need two
seperate nocat gateways?  Can nocat handle different access rules on a
per user basis? advice?

-- 
-Nathan R. Ben-Attar
[email protected]