Basically, one port comes down from the firewall to the switch. I have a sub-interface on the firewall for the second vlan. The LAN is on the default vlan and then I have a second vlan. The port that goes to the firewall is in both vlans and tagging is enabled on that port in vlan2. The "access port" that is in vlan2 does not have tagging on it.
What is wrong with this setup?