Your vlan config will have to include port 1 on all other ports because port 1 is the trunk from you pfsense box
so port members for vlan 3 and 50:
1,2,3,4
And Port tags for vlan 3 and 50:
1,2,3,4
Thank you very much for the assist. Would not have been able to get through.
Have noticed though, my ssids are going in and out. My guest and office are visible, but not my student, which is weird. All three were just there
And it’s back 
I’m not sure about the SSID issue. Are you making any changes on the controller? the AP has to provision every time you make any changes. Glad I could help you out. I hope you get a raise over this deal 
I hope so too 
Firewall rules tomorrow as they still give me access to everything that’s supposed to be blocked.