New radio connect WLC for 60 second then reconnect

Question

I have a 5508 with sw 7.0.98, i have 30 3500 ap conected inn local mode. When we connect a 1142ap on a remote location the radio connect the controller download sw stay there for about 40-90 sec, the reconect. On a other remote site against the same controller, is everything ok.
Log
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
*Aug 17 08:05:20.997: %WIDS-6-DISABLED: IDS Signature is removed and disabled.
*Aug 17 08:05:20.998: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Aug 17 08:05:30.998: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Aug 17 08:05:31.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.160.10 peer_port: 5246
*Aug 17 08:05:31.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Aug 17 08:05:31.890: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.160.10 peer_port: 5246
*Aug 17 08:05:31.891: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.160.10
*Aug 17 08:05:31.891: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
*Aug 17 08:05:32.052: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG
*Aug 17 08:05:32.195: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Aug 17 08:05:32.203: %CAPWAP-5-CHANGED: CAPWAP changed state to UP
*Aug 17 08:05:32.212: %LWAPP-3-CLIENTEVENTLOG: OfficeExtend Localssid saved in AP flash
*Aug 17 08:05:32.382: %CAPWAP-5-JOINEDCONTROLLER: AP has joined controller H1-WLC01-R132
*Aug 17 08:05:32.402: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Aug 17 08:05:32.411: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Aug 17 08:05:32.436: %LWAPP-3-CLIENTEVENTLOG: Switching to Connected mode
*Aug 17 08:05:32.437: %LWAPP-3-CLIENTEVENTLOG: SSID Statnett_Guest added to the slot[0]
*Aug 17 08:05:32.452: %DOT11-6-DFS_SCAN_START: DFS: Scanning frequency 5680 MHz for 60 seconds.
*Aug 17 08:05:32.461: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
*Aug 17 08:05:32.461: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Aug 17 08:05:32.462: %LWAPP-3-CLIENTEVENTLOG: SSID Statnett_Ansatt added to the slot[0]
*Aug 17 08:05:32.601: %LWAPP-3-CLIENTEVENTLOG: SSID Statnett-VPN added to the slot[0]
*Aug 17 08:05:32.626: %LWAPP-3-CLIENTEVENTLOG: SSID Statnett_Guest added to the slot[1]
*Aug 17 08:05:32.642: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Aug 17 08:05:32.646: %LWAPP-3-CLIENTEVENTLOG: SSID Statnett_Ansatt added to the slot[1]
*Aug 17 08:05:32.686: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Aug 17 08:05:32.702: %DOT11-6-DFS_SCAN_START: DFS: Scanning frequency 5680 MHz for 60 seconds.
*Aug 17 08:05:32.703: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
*Aug 17 08:05:34.077: %LWAPP-3-CLIENTEVENTLOG: SSID Statnett-VPN added to the slot[1]
*Aug 17 08:05:34.261: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Aug 17 08:05:34.277: %DOT11-6-DFS_SCAN_START: DFS: Scanning frequency 5680 MHz for 60 seconds.
*Aug 17 08:05:34.286: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
*Aug 17 08:05:34.287: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Aug 17 08:05:34.303: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Aug 17 08:05:34.388: %WIDS-6-ENABLED: IDS Signature is loaded and enabled
*Aug 17 08:06:34.642: %DOT11-6-DFS_SCAN_COMPLETE: DFS scan complete on frequency 5680 MHz
*Aug 17 08:06:50.970: %CAPWAP-3-ERRORLOG: Retransmission count for packet exceeded max(CAPWAP_ECHO_REQUEST ., 3)
*Aug 17 08:06:50.971: %LWAPP-3-CLIENTEVENTLOG: Switching to Standalone mode
*Aug 17 08:06:50.971: %CAPWAP-3-ERRORLOG: GOING BACK TO DISCOVER MODE
*Aug 17 08:06:50.971: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.160.10:5246

Answer 1

Hi
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
It seems that we have found the cause of the problem, communication from 150.X.X.X is being NAT by some faulty rule in the Firewall here in Oslo.
Thanks for the help