A practical way to carry an isolated Wi-Fi network across OpenWrt, managed switches and a UniFi access point without moving device management onto that VLAN.