Dynamic VLAN assignment on Unifi Devices

https://community.ui.com/questions/I-need-help-setting-up-dynamic-vlan-assignment/a490768f-c8b5-44ac-baab-fc8c0593f882#comment/74376dd4-2316-46fa-89a4-224f434d192d

Framed-Protocol : PPP

Service-Type : Framed

Termination-Action : RADIUS-Request

Tunnel-Medium-Type : 802

Tunnel-Pvt-Group-ID : (VLAN number, as an octet string)

Tunnel-Type : VLAN

USE_TUNNELED_REPLY = YES

Of course you need to set tagged port configuration to the switch connected to the APs.  To connect something to the base (untagged) VLAN, leave the Tunnel-Pvt-Group-ID out for that policy.