Hi,
Make sure the RADIUS client IP on the server, RADIUS key is configured properly. Ping the RADIUS server from the IAP and make sure it is reachable.
Compare the config of the working and the non-working sites. Check if Dynamic RADIUS Proxy and termination settings are the same.
1. Check if a aaa test-server passes. You need to have pap authentication enabled in the RADIUS.
# aaa test-server SERVER-NAME username USER-NAME password PASSWORD auth-type pap
2. Check the client authentication on the auth trace-buf,
# show ap debug auth-trace-buf <CLIENT-MAC>