On IAP-01, make sure there is not an entry in there for 02 in the allowed-ap list. Check again you have auto-join disabled.
On IAP-02, clear the configuration and then log in and reconfigure with different VC address.
That should work, but as m.gallina said, it is better to have them on different subnets.