Having an AP behing an RAP is not a recommended Aruba deployment since you may experience issues because you are creating a GRE Tunnel (AP) through a RAP (GRE/IPSEC)
You should probably try making the AP125 a RemoteAP
Through the console you could do it:
setenv remote_ap=1
save
boot