Keep it simple.
Trunk port to the MT device,
Ensure the MT device gets assigned (manually is better) an IP address from the 'trusted vlan" could be base vlan, management vlan or simply a home vlan
Could you please elaborate further and deeper?
No need if your configuration is working now… There are multiple solutions.