Are they Instant APs?
If they are standard controller based ones, they need to get the image from the controller. I have only done this when connected to the same subnet as the controller.
There may be a way to do it across a different network, but I can't say what that is off the top of my head.