This is not my area of expertise so I hope one of the others can comment. In my case, I gave up on VLANs because I managed to lock myself out of my own outdoor router in playing with them and interfaces, etc, maddeningly requiring climbing a ladder because OpenWrt does not yet have a buttonless failsafe trigger. I don't strictly need VLANs so I gave up.