I work at a school district with five buildings with each being it's own vlan/subnet. One of our remote buildings is connected to our main campus via a 10mbit link. All of the AP's at our main campus forward traffic to the controller and it works fine since we have fast links. For the remote building, I want to keep the same SSID setup (district and guest) at the remote building but use bridge mode so the guests are assigned IP's from that buildings subnet instead of the wireless vlan that the main campus devices get.
1) Enabled Control Plane Security and auto cert provisioning for all addresses
2) Made a new AP group named after the remote building
3) Made a new VAP in the new ap group set forwarding mode to bridge and made sure VLAN was set to none.
The AP gets the information from the controller, reboots and I can see the SSID. When I connect, it never assigns an IP and I end up getting a 169.x.x.x address eventually. If I switch it to bridged mode, it works just like the rest and get an IP from the wireless vlan but that isn't what I want for this remote building. I'm sure it's something simple I am missing but I can't seem to figure it out.