Are you tunneling the traffic to the Zone Director?
This is a option per SSID/WLAN configuration.
If not -then the traffic will exit the AP tagged per configured VLAN for each SSID/WLAN and the AP needs to be connected to a VLAN aware/configurable switch. The native/default VLAN should be used for AP to ZD management and any VLAN's tagged in the WLAN configuration must be configured to handle these as tagged VLANs.
It is best not to tunnel traffic to the Zone Director unless you are solving a particular problem with VoIP networks where VLAN's are not configurable across a large network or you need all traffic sent to some remote NOC. Tunneling traffic to the Zone Director will strain the ZD Ethernet capabilities.
But - if you do have WLAN's tunnel to Zone Director with VLAN's, then the setup on the ZD port is similar to un-tunnel configuration at the AP's - a VLAN aware switch is needed that leaves the ZD to AP VLAN as native/untagged/default and then any VLAN's tagged per WLAN must be carried as tagged.
Also, if you use VLAN's you must configure routed interfaces in your router for each VLAN and include DHCP services for each VLAN in that router or using DHCP relay to a central DHCP server.
There are many articles on the Support Site Knowledge base that may be helpful, here is a preliminary one:
VLAN Configuration for ZD, AP and for wireless clients
Placing ZD and APs in VLAN Environment
I hope this information is helpful
Thanks for selecting Ruckus Networks - a Commscope company.