It is actually straightforward, as long as you don't follow the instructions for non-ipq40xx devices. I presently have multiple, trunked VLANs on the "blue" port, and one of those bridged to the "yellow" ports as untagged, running on multiple EA8300s.