@hbrector 

1. Do not use vlan 1, that should be a blackhole where traffic goes nowhere.
2. Switches should be in the administrative vlan, nothing else.
3. switch ports on the other hand may each have a different PVID or may pass or not pass certain vlans across. you can have different port profiles for that.
4. Do not put ip phones in the same vlan with computers. create a dedicated network segment with that.
5. yeah all that can be done just fine with the controller.