VLAN on 5324 - no routing

Current environment:

 

We have a simple star pattern involving 5x 5324 switches as client ends, with another 5324 in the centre with servers and firewall connected to the central switch. All endpoints use the IP range 192.168.40.0/24

 

 

What I would like:

 

I would like to have two ports on each of the client side switches for a visitors VLAN. I do not need to route between the visitors network and the normal network, as I will do this via a DMZ on our firewall. Ideally, there should be minimal talk between the two. This will be on another subnet - 192.168.43.0/24

 

 

What I am planning on doing:

 

create VLAN 20 (visitors) on each switch

 

on each client 5324, allocate port g21 & g22 to VLAN 20 as access ports

 

on each client 5324, allocate port g24 as trunking port and allow VLAN 1 and VLAN 20

 

on the central 5324, allocate ports G19-G24 as trunking ports and allow VLAN 1 and VLAN 20 and allocate port G18 to VLAN 20 to plug into the DMZ for routing.

 

 

What I need to know:

 

a) any tips for doing above

b) will it work?