i have seen several of the regulars here suggest using a wired profile on the port which connects the IAP to the switch.
from my original IAP training i was told that the IAP port is default a trunk which accepts all VLANs. I don't have to allow VLANs, all are available for me anyway right?
now it seems the wired profile can do things like allowed VLANs and set native VLAN, but it isn't required right?