Utilizing Eth1 on APX 530/740 as an access port (un-tagged in a VLAN)

Question

I've already read this: https://community.sophos.com/kb/en-us/133199 (APX 530 / APX 740 ETH1 Interface FAQ) 
 I am not using VLAN 1, it is default and used for STP which AP does not participate in. 
 VLAN 2 = Corp Network (work stations) 
 VLAN 3 = Guest 
 Current Config: 
 Network Switch PoE+ --> Switchport Trunk VLAN's 2 & 3 --> APX 530 bridged to SSID Corp (VLAN2) & Guest (VLAN3) 
 
 I'd like to un-tag Eth1 on VLAN 2 (corp network) and connect a workstation. It is not ideal but I need to recoup the port as this is existing construction and no other low voltage cabling can be installed & the desktop does not do wireless. What I would like this to look like is this: 
 
 Network Switch PoE+ --> Switchport Trunk VLAN's 2 & 3 --> APX 530 Bridged to SSID Corp (VLAN2) & Guest (VLAN3) And... Eth1 is Access Port VLAN 2 / un-tagged VLAN 2 
 
 Thanks, 
 Chris 
 PS. My hunch is the there is no built in SW in the AP and the two Eth Ports are the same, except Eth0 has PoE input.

Tejas Kashyap · Accepted Answer

Hi Chris, 
 Both the ethernet interfaces will be part of the same bridge. So, eth1 will always expect untagged traffic in the AP management VLAN only. VLAN 2 and 3 will be tagged on eth1 as well 
 There is no way of configuring VLAN 2 (in your case) to be untagged on eth1. 
 -Tejas