Can't know for sure. If you don't have another port free at least push LAN to VLAN ID 10 so both are clearly separated.The biggest issue here is LAN is the only preconfigured network with internet access pass rule and this setup extends it to the VLAN without intention by configuration.Connectivity-wise this works, security-wise not so much.Cheers,Franco