you would also need to configure the DHCP scope to have option 43 to point the AP at the WLC., assuming they have been converted or already running the recovery image,
For the small number of AP you have at each site you could also do a forward protocol at L3. I'm not sure of the commands on the pix but on a router you do ip forward-protocol 5246/5247/12222/12223(one line for each) then add an ip helper pointing to your WLC management ip address.
Third option would be to create the DNS entry Cisco-capwap-controller and link that to the WLC management IP address. Then you give the ap the DNs server in the DHCP scope and it should resolve and join.
HTH,
Steve
Sent from Cisco Technical Support iPad App
HTH,
Steve
------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered