Проблема - Не работает DHCP на Catalyst 3750 c VLAN-ами.

СХЕМА:

AP1200 (vlan 1 и 20)--> Catalyst 3750(c DHCP pool для vlan 20)---> DHCP host (для vlan 1)

ПРОБЛЕМА - на AP1200 ассоциация клиента происходит, а IP адрес от DHCP клиент не получает.
(причем ни в ssid USERS(VLAN 1), ни в ssid GUEST(VLAN 20) )

Если прописываю IP на клиенте явно - всё ОК.

Ставил на Catalyst3750 - debug ip dhcp server packet + debug ip dhcp server event , то при попытке получить гостевой доступ (ssid GUEST) - от дебага -тишина.

При включении дебага
debug ip packet

получаю :
ep  9 13:15:42.052: IP: s=169.254.156.165 (Vlan20), d=169.254.255.255, len 96, input feature, MCI Check(62), rtype 0, forus FALSE, sendself FALSE, mtu 0
Sep  9 13:15:42.060: IP: s=169.254.156.165 (Vlan20), d=169.254.255.255, len 96, input feature, MCI Check(62), rtype 0, forus FALSE, sendself FALSE, mtu 0
Sep  9 13:15:42.060: IP: s=169.254.156.165 (Vlan20), d=169.254.255.255, len 96, input feature, MCI Check(62), rtype 0, forus FALSE, sendself FALSE, mtu 0
Sep  9 13:15:42.798: IP: s=169.254.156.165 (
Intell_SW#Vlan20), d=169.254.255.255, len 96, input feature, MCI Check(62), rtype 0, forus FALSE, sendself FALSE, mtu 0
Sep  9 13:15:42.807: IP: s=169.254.156.165 (Vlan20), d=169.254.255.255, len 96, input feature, MCI Check(62), rtype 0, forus FALSE, sendself FALSE, mtu 0
Sep  9 13:15:42.807: IP: s=169.254.156.165 (Vlan20), d=169.254.255.255, len 96, input feature, MCI Check(62), rtype 0, forus FALSE, sendself FALSE, mtu 0
Sep  9 13:15:43.553: IP: s=169.254.156.165 (Vlan20), d=169.254.255.255, len 96, input feat
Intell_SW#ure, MCI Check(62), rtype 0, forus FALSE, sendself FALSE, mtu 0

ВОПРОС - Где грабли ? ;-)
Конфиги ниже:
===============================================================
Config Cisco AP1200

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
enable secret 5 xxxxxxxxxxxxxxxxxxxx
!
ip subnet-zero
!
no aaa new-model
!
dot11 ssid GUEST
   vlan 20
   authentication open
!
dot11 ssid USERS
   vlan 1
   authentication open
!              
username Cisco password 7 xxxxxxxxxxxxxx
!        
bridge irb    
!        
interface Dot11Radio0
no ip address
no ip route-cache
!        
ssid GUEST
!        
ssid USERS
!        
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!        
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!        
interface Dot11Radio0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
!        
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
hold-queue 160 in
!        
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!        
interface FastEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
!        
interface BVI1
ip address 10.50.1.102 255.255.255.0
no ip route-cache
!        
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!        
!        
control-plane
!        
bridge 1 route ip
!              
line con 0
exec-timeout 0 0
logging synchronous
line vty 0 4
login local
!        
end

=========================================================

Config Catalyst 3750

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service unsupported-transceiver
!
hostname In_SW
!
boot-start-marker
boot-end-marker
!
enable password xxxxxxxx
!
username cisco password 0 xxxxxxxxx
no aaa new-model
clock timezone MSK 3
switch 1 provision ws-c3750g-24ts
system mtu routing 1500
ip subnet-zero
ip routing
no ip dhcp use vrf connected
ip dhcp excluded-address 10.50.1.1 255.255.255.0
ip dhcp excluded-address 10.50.1.50 255.255.255.0
!
ip dhcp pool GUESTpool
   network 10.50.1.0 255.255.255.0
   default-router 10.50.1.50
.......

vlan internal allocation policy ascending
!
interface GigabitEthernet1/0/1
description ----> TRUNK to AP1200
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,20
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet1/0/2
description -----> Тo  LAN (VLAN1, DHCP for ssid USERS)
spanning-tree portfast
spanning-tree bpdufilter enable
!
........................
!
interface Vlan1
ip address dhcp  -- (адрес получает от DHCP host. Всё ОК)
!
interface Vlan20
ip address 10.50.1.1 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.244.6 254
ip http server
ip http secure-server
!
................
!        
end
===============================================================