Needless to say, my internet demarc (fiber) plugs into port 2 on my switch. Proxmox hosts plug into ports 1,4,5, and 7 on the switch. The connection to the internet therefore rides on vlan 9. Internal traffic rides on vlan 1 and is untagged. Complicated maybe for a home environment but not too...