Switchport baseline for a wireless AP: tagged SSID VLANs, untagged management, PoE.
configure terminal
!
interface 1/1/10
description Wireless AP
no shutdown
vlan trunk native 99
vlan trunk allowed 10,20,30,99
power-over-ethernet
spanning-tree bpdu-guard
spanning-tree port-type admin-edge
!
! The AP manages itself on the native VLAN and bridges SSIDs on tagged ones.
! bpdu-guard is safe here because an AP must never send BPDUs.
!
end