Hi,
Thank you for your response. the rule is as below:
Rule Type: Provisioning Rule
Parent Folder: ABC
Provisioning Type: IAP to CAP (controller)
AP Group: test
controller: MD IP
Persist Controller IP : Checked
Rule name: IAP to CAP
Create date: Today
Created by: XX.
CPsec disabled.
Thank you!