I am running a Palo Alto PA-440 connected to a NETGEAR GS308EP managed switch where the AX3000 also connects.

Currently I am using the Palo Alto as the DHCP server and have VLANs configured as subinterfaces. 

I am attempting to associate the VLANs with SSIDs.  I.e.: Default (VLAN 1), Guest (VLAN 10), Kids (VLAN 20), etc.

The issue I am running into is that the clients do not recieve DHCP when I connect to the Guest or Kids SSIDs.  The MGT IP of the AX3000 is in the default VLAN and will only hand out IP's from that subnet.

I have disabled DHCP on the AX3000 because e3ven though there are multiple SSIDs it does not allow me to have more than one DHCP scope.

If I change the switch port config connected to the AX3000 to a trunk port nothing works.

I have been fiddling with this for 3 days trying so many different configurations to try and get this working but have had no success.

Is this a firmware bug?  In my research I have come across other TP-Link wireless routers that have had similar issues that were resolved through firmware upgrades.  Or am I missing a setting somewhere?

Please help.