the native vlan is generally not tagged so you done need to do anything on the Instant AP.
By default whatever the native VLAN is, that's where the AP will get it IP address from.
Your config will work as along as VLAN 101 and 102 are tagged on that switch port that AP is connected to.
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
------------------------------
Original Message:
Sent: Jul 23, 2022 08:31 PM
From: Nawir Bunai
Subject: AP-515 native vlan
AP-515
wlan access-rule STAFFindex 2rule any any match any any any permitwlan access-rule GUESTindex 3rule any any match any any any permitwlan ssid-profile STAFFenableindex 0type employeeessid STAFFvlan 101wlan ssid-profile GUESTenableindex 1type guestessid GUESTvlan 102captive-portal internalwlan captive-portalwired-port-profile wired-SetMeUpswitchport-mode accessallowed-vlan allnative-vlan guestno shutdownaccess-rule-name wired-SetMeUpspeed autoduplex autono poetype guestcaptive-portal disableno dot1xwired-port-profile default_wired_port_profileswitchport-mode trunkallowed-vlan 100-102native-vlan 1shutdownaccess-rule-name default_wired_port_profiletype employeecaptive-portal disableno dot1xenet0-port-profile default_wired_port_profileuplink
QUESTIONS:
1. since switch port that AP connected using native vlan 100
should I change "native-vlan 1" in AP site to "native-vlan 100"
2. since switch using trunk mode and AP need to server multiple vlan ssid
in AP should I set "wired-port-profile default_wired_port_profile" to trunk mode
switchport-mode trunk
allowed-vlan 100-102
tq