MSM720 configuration question

[js2013]

Hi all,

Have been reading a lot of doc & forums and what I want to achieve is probably not hard but I have not been able to figure out how to do this.

To simplify, I have a MSM720, one MSM422 AP, and of course a switch.

I want to use port 1 of msm720 for mgmt only, port 2 of msm720 for guest traffic (vlan20)

and port 3 of msm720 for employee traffic (vlan30), port 5 (internet port) of msm720

is connected to a firewall which is the def. gateway for outgoing traffic.

- mgmt network 192.168.1.0/24 msm720 192.168.1.10 msm422 192.168.1.20

- guest network 192.168.2.0/24

here I would like that msm722 has ip 192.168.2.1 and clients gets dhcp IPs in range 192.168.2.50-99

with gateway 192.168.2.1

 - employee network 192.168.2.0/24

here I would like that msm722 has ip 192.168.3.1 and clients gets dhcp IPs in range 192.168.3.50-99

with gateway 192.168.3.1

MSM720

Port 1 vlan 1 untagged     -> connected to switch port 1 - member of vlan 1 untagged

Port 2 vlan 10 untagged   -> connected to switch port 2  untagged vlan 10

Port 3 vlan 30 untagged   -> connected to switch port 3  untagged vlan 30

Port 5 (Internet port)  - connected to firewall

MSM422 AP

connected to switch port 4 unttaged vlan 1 tagged vlan 10 & vlan 30

If I try to implement this I cant see any traffic passing port 2 or port 3 of the msm720, it seems that all traffic goes through port 1.

Has anybody setup some thing matching this and got it to work ?

TIA for any help

JS.