Wireless Access

Hello. My network looks like on attachment below. I have router connected to Aruba 2530 switch, Aruba 2530 switch connected to Aruba 7030 controller, which is conneted to multiple 1930 switches with 32 Aruba 305s access points. I have 2 networks but I want to allow only one of them to access internet. WLANS are in different VLANS (5 and 11). Since my WLANs are in tunneled mode I assume I don't need to worry about connection from controller to APs so my ports are in access mode (with access vlan=5). The port that is connected to my 2530 switch is in trunk mode (native vlan=5) and it allows both 5 and 11 vlans to transmit. On 2530 I have 3 vlans but vlan 1 is not used. VLAN 5 contains Trunk1 (untagged) which is connection to my controller. VLAN 11 contains Trunk2 (tagged) which is connection to my router. I guess my Trunk1 in VLAN 5 should be in both networks (VLAN 5 and 11) as tagged but when I try to make it tagged the connection fails. It seems like the connection is untagged. But I specifically configured my controller to send trunk frames on my connection to 2530 Switch. Below is my 2530 config. 

• trunk 28 trk1 trunk

• trunk 11 trk2 trunk

• ip default-gateway 192.168.5.1

• interface 11

  • name "VLAN11ONLY"

  • exit

• snmp-server community "public" unrestricted

• vlan 1

  • name "DEFAULT_VLAN"

  • no untagged 1-10,12-27,Trk1-Trk2

  • no ip address

  • exit

• vlan 5

  • name "MAG"

  • untagged 1-10,12-27,Trk1

  • ip address 192.168.5.10 255.255.255.0

  • exit

• vlan 11

  • name "AVG"

  • tagged Trk2

  • ip address 192.168.11.10 255.255.255.0

  • exit

• primary-vlan 5

• spanning-tree Trk1 priority 4

• spanning-tree Trk2 priority 4

• no tftp server

• no dhcp config-file-update

• no dhcp image-file-update

I've just noticed that my Aruba 7030 controller doesn't ping my 2530 switch. There are 2 vlans however (5 with 192.168.5.36 controller IP does ping 192.168.5.10 switch, but 11 with 192.168.11.36 does not ping 192.168.11.10 switch). There is only one port connected to switch with both vlans (fiber).

Hi, I'm having trouble to understand what you need to do and where are you rigth now?

Here are some questions in order to understan

1.- Is the router the Internet gateway? 
1.1.- In case it is. Do you have a default route to the router IP?
2.- Which vlan you want to hace Internet access?
3.- What is the systemp IP of the controller?
3.1.- If the vlan 11 is not your system IP you will need to use the source command to ping the router