Any chance you can provide some further information which might help us diagnose the issue? If you run the following via the CLI
#show ap database long
- Is there any flags next to the RAP's?
#show datapath session | include xxxxx
- Where XXXX is the outer IP of the RAP.
#show log all | include xxxx
- Where XXXX is the name of a RAP
#show control-plane-security
- Is control plane security enabled?