First things first:
What are you powering the AP125 with? Does a device that is plugged into the eth1 show a link? If Yes, you are good. If NO, you are not providing enough power to the AP.
Second: If the link is up, traffic should pass and be placed on the VLAN in your infrastructure defined in the wired link profile. If that does not work, you need to figure it out before we start with roles and authentication:
If you have the wired port as trusted, it will let all traffic pass without assigning a role; you want it like that initially to establish connectivity first. Once you establish that devices can get an ip address from your infrastructure, you can change the wired profile to Untrusted, and users will be placed into the initial role of the AAA profile and end up in the user table.