Authentication to ACS working okay.
Clients are unable to obtain an IP from DHCP.
DHCP server is configured on a dynamic interface but is on a different subnet located in a branch office. DHCP scope is running on a 4500 switch in the branch.
Is it preferable to have DHCP running on the internal WLC or a DHCP server close to the WLC rather than at the remote location?
Usually you don't want to have a dhcp server on a remote site, but it also should work as long as wired users are able to obtain an IP from the remote dhcp server. Preferred, like I said is to have a local dhcp, but if that doesn't work for you, then configuring the wlc to bbe a dhcp isn't a bad think either. Some like to have more control over the dhcp.