If I understand it correctly (I actually have colored cables) I would need a managed switch instead of an unmanaged switch (from tp-sg1016de to tp-sg1005d where the tp-sg10005d is a unmanaged) in order to make a vlan there?
on of the wifi access points is on the managed switch directly this one I could configure as an untagged? As I understand tagged carries the vlan id and untagged removes?