H-REAP access points drop all traffic off locally through a trunk link, whereas non-H-REAP access points send all traffic back to the controllers first. So it sounds like your DHCP server is unable to be reached from your controller. Does your DHCP server exist at a different site from your controller, and maybe the subnet it's on is somehow blocked?
Additionally, controllers perform similar functionality to ip helper-addresses for non-H-REAP access point clients. Is the DHCP server address properly configured under the VLAN interface on the controller?
To add onto Jeff's good points, you also need to make sure your wlan ssid is set to local switching or else the traffic will come back to the interface specified on the wlan. On the ap, you need to make sure you set the management vlan and correctly map your wlan to vlans. With the switchport configured as a dot1q trunk and the management vlan set to native, you are pretty much set. The rest is all infrastructure.... making sure the vlans are configured on the switch, ip-helper, etc.
Are you trying to get this to work with the ap's in H-REAP mode or local mode? With H-REAP, you don't need to create dynamic interfaces. In the case of h-reap, dhcp request will be done via the ap, in local mode the wlc will forward the dhcp request.
With the ap in local mode and not in h-reap mode? Everything tunnel back to the wlc. This is why you need to create dynamic interfaces on the wlc. The WLAN you create will be mapped or set to use one of the interfaces on the wlc. AP group allows you to map multiple subnets to a single said. If you don't have a large deployment where you need this feature then I don't suggest using it. Get local mode working first before trying to get ap groups working. Just do a search on Cisco's website for AP Groups. You will find a good doc.
Transferring Crash file from standby:
Login to the Active WLC in HA.
(Cisco Controller) >transfer upload datatype crash
(Cisco Controller) >transfer upload filename <Desired filename>
(Cisco Controller) >transfer up...
This is the start of a display filter cross reference between Wireshark and OmniPeek.
The 1st installment is a table of advanced filters. More filters will be added as time allows.
It is a living doc, so check back for changes every so often
Please feel ...
I have created a Powershell script to automatically add a Wireless Guest User on Cisco WLCs. (tested on 2500 Series)
The script should be completely self explanatory.
Powershell SNMP Module (Install-Module -Name SNMP)
SNMP Write Access to...