What version of IAP are you running?
How many devices do you have connecting to that SSID? What size is the subnet? Could it be running out of leases?
If a device is getting 0.0.0.0 that sounds like it just didn't get an IP address yet. You should try running wireshark on a device and connect it to the mobile SSID and watch the DHCP packets, see if your getting an offer from the VC and if your device accepts it.