how did you setup your networks on the IAP? did you use the IAP assigned option?
to what NAT type do you want to change?
a change from PSK to MAC auth wouldn't make any difference.
a solution that would probably work is not to use the network on the IAP but put your user in a network that is on your wired network.