I feel like I am missing steps but that is what I read? Since the customer will never know about VLANS, I don't need any VLAN memberships built? They plug in to the Ethernet port and get an IP served from VLAN 10's pool. I plug in a tech laptop with a static IP in the management subnet AND tagging VLAN 5 and I can access any radio IP.