diff --git a/kube/deploy/vm/ad/_deps/multus.yaml b/kube/deploy/vm/ad/_deps/multus.yaml
index 1f025ca9..f97df354 100644
--- a/kube/deploy/vm/ad/_deps/multus.yaml
+++ b/kube/deploy/vm/ad/_deps/multus.yaml
@@ -13,7 +13,6 @@ spec:
         {
           "type": "bridge",
           "bridge": "br0",
-          "vlan": 888,
           "capabilities": { "mac": true },
           "ipam": {}
         }
@@ -21,5 +20,6 @@ spec:
     }
 
 ---
+#          "vlan": 888, # VLAN tagging handled by FortiSwitch NAC
 #          "disableContainerInterface": true
 #          "macspoofchk": true # TODO: Talos 1.6.4 doesn't have `nft` binary?