Hi,
you should be able to set the tagged and untagged vlans for each port in the "802.1Q VLAN" menu. The port that is coming in from your gateway should have all vlans tagged by their VLAN-ID that you have specified while creating the vlan.
On the port were your accesspoint is connected to you need to have your Management-VLAN (The VLAN were your controller is in) specified as "Untagged" and the rest of the vlans as "Tagged".