I have a 4402 wireless controller whose management and ap management interfaces are connected to VLAN1 with the WAPs on VLAN17.
When I confiigure the 4402 I have to assign the ap manager interface to VLAN1; however, if I try to assign the management interface to VLAN1 I cannot telnet or https to the 4402. In order to do that I have to mark the management interface as 'untagged. Why can't I explicitly assign the management interface to VLAN1 since in fact it is on VLAN1??
Best practice is to not tag the management and ap-managers interface. vlan 1 on a switch is untagged so you need to set the management and ap-manager to vlan '0'. It is just how it has to work. Even if you have the management and ap-manager on vlan 50, you need to set the native vlan on the trunk port to vlan 50.