Noob here. I have new Omada gear (router and switch). What's the point of setting up just a VLAN if you can't assign a separate subnet to it and create ACLs? With a VLAN Interface, all of that's possible.