|You are still working on this two months later???|
OK so you can't remove vlan1. This should not mean you have to assign it to a port. You would only assign vlan2 and vlan 3 to ports while excluding [not assigning] vlan1
vlan tagging relates to travel thru a trunk which you are not doing so vlan tagging shouldn't matter. Do untagged.