Separate management Vlan

[Toscana]

Hi,

we're planning to deploy 9120AXI access points in two of our branches. At each site there is one access point with EWC on board. APs are connected to the access switches (2960-XR), together with all other clients (ip phones, computers etc.) We intend to setup two SSIDs on each branch, enclosed in separate Vlans. Looks roughly like this:
Vlan 10 - data
Vlan 20 - voice
Vlan 30 - SSID 1
Vlan 40 - SSID 2

Is it possible/intended by the manufacturer to manage the master AP (EWC) via separate management Vlan (e.g. Vlan 10) and to keep Wifi traffic completely off this vlan? Could be like that:
Master AP: Vlan 10,30,40
Slave AP: Vlan 30,40

Additional: How does master AP provide configuration changes to the satellites?

Thanks for any comment, folks. Regards
Stefano

[Wes Schochet]

In this scenario, you'd create trunks for all APs and have their management / native VLAN be 10.  The only time traffic would hit 30 or 40 is when the flex policy (or flex group) associated the SSID to that VLAN.

[Rich R]

The EWC AP and the subordinate APs must talk to each other over the management VLAN so:

Master AP: Vlan 10 (native),30,40
Slave AP: Vlan 10 (native),30,40

So to answer your question the master will talk to the slaves over vlan 10.

The WiFi user traffic is switched over vlan 30 and 40.

[Scott Fella]

Just to add, why not create a vlan just for your ap's, this way the traffic is separate fro all the data traffic?