The Bal30 doesn’t need an IP address on the VPNUsers VLAN: it won’t route that VLAN or supply DHCP, will only generate packets for the VPN users IP addresses. So if it doesn’t need an address, it shouldn’t be forced to have one.
Not urgent. Just for tidiness, really.