is role1=monitor perhaps insufficient? all the examples i see online are like here: http://blog.photic.net/index.php/category/cisco/ or perhaps just for whatever version your wlc is running