Hello Ramiz,
Things you may also want to look at:
1 - VLANs 1 and 4 are allowed through ge1 port (trunk) on the AP (in AP profile on the controller)
2 - VLAN 4 is configured as the native vlan and setting ‘#ip dhcp client request options all’ is configured unless you manually entered the DGW and DNS info
3 - Both VLAN 1 and 4 are allowed through the switchports the APs are connected to
4 - You have the best practices firewall policy installed https://extremeportal.force.com/ExtrArticleDetail?an=000078342
5 - You are on the latest 7.5.1.3 code
6 - The wlan is properly mapped to vlan 1
You can also configure the vlan you want to test with on your laptop and plug the laptop into the port the AP is connect into to see if you get an IP address from said vlan.
On the AP you can run the following command to see where DORA is failing (run command and attempt the wireless connection):
#service pktcap on interface ge1 count 100 filter port 67
Rgds
Christoph S.
