Assign several VLANs to one Access Point

Hi,

let me first try to explain my current setup and the intention for having several vlans on one AP. I use Sophos XG Firewall as virtual appliance and a Sophos AP 100.

- I have one SSID (Access01) using "Bridge to AP LAN". Clients connected to this SSID can access all computers within my main network.

- I'd like to create a second SSID (Access02) to have a dedicated network for all kind of IOT Devices (Cams, Smart Home Control etc.). So I could easily create a SSID as "seperate zone" with internet access only. However some of these Devices are not wifi enabled, means they are plugged in via ethernet cable. So in order to integrate wifi as well as non-wifi devices into this a new network, I'd like to create a dedicated VLAN (VLAN50).

What I've done so far:

1. Create a DHCP Server using 192.168.50.1/24 with a Range of x.100 - x.200

2. Create a Vlan Interface (Vlan50) with static IP 192.168.50.10

3. Create a Wireless Network "IOT" "Bridge to Vlan" pointing to Vlan 50

So far everything seems to be correct. But now I try to assign this SSID "IOT" to my Access Point. This doesn't work either directly assigning it to the AP nor via adding it to my Access Point Group DefaultGroup. The error message is:

"The current VLAN tagging setting in Access Point group is not compatible with the wireless network in bridge mode to VLAN"

If I then enable Vlan Tagging with Vlan 50 on this AP I get the following message:

"The current VLAN tagging setting conflicts with Client Traffic option 'Bridge to AP LAN'."

So what does that actually means? Is it not possible to have Wireless Networks configured as "bridge to VLAN" AND "bridge to AP LAN" running on the same physical AP?

Is there any workaround or even a complete different approach in order to achieve my goal? Do I need to use a second AP where I can assign this VLAN to?

Best Regards,

Peter