Dynamic VLAN assignment on Unifi Devices

https://community.ui.com/questions/I-need-help-setting-up-dynamic-vlan-assignment/a490768f-c8b5-44ac-baab-fc8c0593f882#comment/74376dd4-2316-46fa-89a4-224f434d192d 

 Framed-Protocol : PPP 

 Service-Type : Framed 

 Termination-Action : RADIUS-Request 

 Tunnel-Medium-Type : 802 

 Tunnel-Pvt-Group-ID : (VLAN number, as an octet string) 

 Tunnel-Type : VLAN 

 USE_TUNNELED_REPLY = YES 

 Of course you need to set tagged port configuration to the switch connected to the APs.  To connect something to the base (untagged) VLAN, leave the Tunnel-Pvt-Group-ID out for that policy.