Any Cisco AP gurus willing to give me some insight?

I'm having difficulty setting up a Cisco AP in Autonomous mode that will broadcast an SSID for a specific VLAN, but will have an IP address for management in another VLAN.

Does the switchport this AP is connected to need to be a trunk port since i've got a vlan assigned to the SSID on the ap itself? It's not working that way. The only way I can get it to work is to set the vlan on the switchport manually. The AP pulls a dhcp address from within that VLAN and every client who connects to that SSID gets an address from within that VLAN.

I just need the AP to get an IP from another VLAN for management. I don't want clients to be able to ping/access the AP

Thanks