The access point requires the switch port to handle two traffic types: untagged management traffic on the default VLAN (VLAN 1) and 802.1Q tagged guest traffic on VLAN 10. On RUCKUS ICX switches, all ports are, by default, untagged members of VLAN 1. This default state already accommodates the AP's management traffic. The only required change is to add the guest traffic VLAN. The command vlan 10 tagged ethernet 1/1/10 adds port 1/1/10 as a tagged member of VLAN 10, allowing it to process the tagged guest traffic while retaining its default untagged membership in VLAN 1 for management.

A. This command incorrectly configures VLAN 10 for untagged traffic, but the AP will send guest traffic with a VLAN 10 tag.

B. This command removes the port's untagged membership from VLAN 1, which is the management VLAN. This would prevent the AP from communicating with the management network.

D. This command removes untagged membership from VLAN 10. It is an irrelevant action that does not configure the necessary tagged membership for the port.

1. RUCKUS FastIron Layer 2 Switching Configuration Guide, Release 08.0.95, Chapter 3: Configuring VLANs, Page 48, Section: "Default VLAN and default port configuration".

This section states: "By default, all ports on the device are members of the default VLAN (VLAN 1)." This confirms that the port is already correctly configured for the untagged management traffic without any explicit commands.

2. RUCKUS FastIron Layer 2 Switching Configuration Guide, Release 08.0.95, Chapter 3: Configuring VLANs, Page 51, Section: "Adding a port to a VLAN as a tagged member".

This section provides the exact syntax used in the correct answer: vlan followed by tagged ethernet . This command adds the port to the specified VLAN for handling 802.1Q tagged frames, which is the requirement for the guest SSID traffic.

3. RUCKUS FastIron Layer 2 Switching Configuration Guide, Release 08.0.95, Chapter 3: Configuring VLANs, Page 50, Section: "Removing a port from a VLAN".

This section explains the use of the no untagged ethernet command, confirming that its use in option B would remove the port from VLAN 1, thereby breaking management connectivity.