The commands to map an SSID to a VLAN on an IOS access point are basically like this:
[snip]
dot11 ssid MYSSID
vlan 5
!
interface Dot11Radio0
ssid MYSSID
!
interface Dot11Radio0.5
encapsulation dot1q 5
bridge-group 5
!
interface FastEthernet0
!
interface FastEthernet0.5
encapsulation dot1q 5
bridge-group 5
!
[snip]
My question is this: what does the command "vlan 5" actually do? Does it map MYSSID to bridge-group 5, which is then mapped to 802.1q tag 5 by the subinterface configurations (so that the tag number is arbitrary), or does it map MYSSID to 802.1q tag 5 on the radio interface, which is then bridged to the appropriate dot1q subinterface on the wired side by the bridge group (so that the bridge group number is arbitrary)?