fully functional vlan-per-tenant setup