For a special customer, they have a single VLAN at a location. The switchports are all currently access ports. I'm going to have an Internal SSID and a Guest SSID that will be on the same VLAN with the AP acting as a FW to keep the guests away from everything but the Internet. Do I need to tag these as VLAN48 like I would typically do with the AP connected to a trunk? Should I just have them configure the switchports as trunks?