Enabling IPv6 was the fix for me as well. After doing this every user in the user-table had a corresponding IPv6 address. Does anyone have a better solution than enabling IPv6, or an explanation as to why this is necessary?
Here is my environment:
OS: 6.1.3.4
VAP Settings:
-Convert BC arp requests to unicast = unchecked
-Deny inter user traffic = unchecked
-Drop BC/MC = unchecked
Controller Settings
-Stateful FW
-Deny inter user bridging & traffic = unchecked for ipv4 & ipv6.
-Default settings for rest.
Before 'ipv6 enable' & 'enable ipv6 stateful firewall' were selected, i was seeing DENYs in the datapath session table from the iPad to the Apple TV. After I enabled both, problems went away and user-table filled up with ipv6 address.
Appreciate any clarification.
Thanks