No you will need to designate both mesh portals on the wire as well as mesh points. All Aruba APs MUST be brought up on the wire first to get their initial configuration. For example, if you have one portal and three mesh points (say all AP-275s), you will bring ALL the new AP-275s up on the wire first. Once they are all up they will show up with the mac address in the 'AP Installation' page.
First - create your AP group that will have the mesh profile configured, then put whatever SSIDs you want in there, and configure whatever wired profiles you will need (access VLAN whatever, or trunk VLAN whatever) applied to ENET0 or ENET1 (whichever one you are using, usually ENET0).
Second - You will designate which will be the portal and which will be the points, and when provisioning them at the bottom of the page, you will name and make the portal a 'portal' from the dropdown, and same for the points designating them the points.
Third - When you see all the Aps reboot, it's best practice to test and make sure they all come up. What you need to be careful to do here is make sure the points are NOT connected to the wired network where the portal is or you can have a loop. So what I do is usually change the switch ports the mesh points are in to a non-connected VLAN or will enable POE but disable L2 so they cannot talk over the wire. You can also move them all over to power injectors, or if they were already on power injectors, just unplug the wired uplink of the POE injector.
Fourth - you should see the portal come up first, then the mesh points shortly after such that all four APs are up.
The user guide has some great instructions on this. Mesh points will get their IP address from the native VLAN of the mesh portal. So in tunnel mode, from the uplink port's perspective, it will see the portal MAC address as well as any mesh point's MAC address, so in our example there will be four mac addresses on that switch port.
The VLANs you need to carry (in case you are doing wired backhaul) in tunnel mode (where all wired traffic is GRE encapped and sent to the controller) would be configured on the controller, has L2 continuity to the controller's uplink to the core network, and os enabled in the wired AP profile. if you are doing bridge-mode, where the wired backhaul traffic egresses and ingresses at the mesh portal, you have to make sure those L2 VLAns are configured on the mesh portal's uplink and that there is L2 continuity from that switch port's uplink to the core.