The problem was with firewall. It had no route back to Controller. As I expect firewall (gateway) tried to send packets to AP istead of Controller.
Static routes helped.
The problem was with firewall. It had no route back to Controller. As I expect firewall (gateway) tried to send packets to AP istead of Controller.
Static routes helped.