Hi, here nearly the same problem.
New Controller installed with 8.1, now on 8.2 on VMware.
All VLANs are tagged forwarded to VMC and APs.
Firewall or Windows Server is DHCP depending on Network.
First step only WPA2 personal.
No problems with default vlan untagged.
I added a IPv4 address to the VLAN and set DHCP to none.
When I connect to WiFi I can see in firewall log the DHCP Offer and discover (incoming from correct VLAN 90) But Smartphone get no IP.
When I change to DHCP Helper Address I can see in firewall request and ack with information tht it comes from configured helper address.
Again no IP at the client.
Windows Client get ip addresses with cable connections in untagged vlans.
interface gigabitethernet 0/0/0
description "GE0/0/0"
trusted
trusted vlan 1-4094
no poe
switchport mode trunk
switchport access vlan 90
no spanning-tree
!
wlan virtual-ap "company-VW"
aaa-profile "company-VW"
vlan OfficeLAN
ssid-profile "company-VW"
!
aaa profile "company-VW"
authentication-dot1x "company-VW"
enforce-dhcp
!
wlan ssid-profile "company-VW"
essid "company-VW"
opmode wpa2-psk-aes
wpa-passphrase ...
!
Any idea?