I have a 2960 that is connected to a NetGear router for cable modem access and to our corp network. The netgear gives out IP addresses for public access. I have a WAP with two SSIDs. One ID is PUBLIC and tagged as VLAN 8. The other is PRIVATE and untagged.
I have updated my diagram to show what I need to happen. Based on what SSID a user attaches to with there laptop, they have access to the corporate lan or public internet access. I cannot get the ports on the switch to allow this to happen. What needs to be set to get it to work via VLANs. No routing between VLANs is needed.