AP650 Troublesome ipads on PPSK

[cforrest]

We have a very odd scenario, we have a number of AP250s in our office all on 40mhz at 5ghz, we have recently introduced an AP650 with one int enabled on ac 20mhz @5ghz. With the theory to migrate all others soon to 20Mhz. On this AP and all others we have 3 SSID's the third is a PPSK network, we can see 1 client can connect to this but no others can, but we know the policy allows concurrent clients using the same key, when you walk out of this area the ipads connect fine. on all other APs AP250 on 8.4r10a, this is AP650 on the newest code. The other SSIDs however on the AP650 code 10.0r7a work with no issue.

I am purplexed to why this is. This quirk is very odd. Any suggestions would be welcome.

[cforrest]

#show idm

IDM client: Enabled Per SSID

IDM Proxy IP: 10.0.137.126

IDM proxy: Disabled

RadSec Certificate state: Valid

RadSec Certificate Issued: 2019-11-22 08:25:33 GMT

RadSec Certificate Expires: 2020-11-21 08:25:33 GMT

exec aaa idm-test radsec-proxy 

The Aerohive device establish a TCP session with the ID Manager auth gateway successfully.

[ashley_finch]

Is the 650 on the same MGT IP as the AP250s? If you do a "show IDM" and "exec aaa idm-test radsec-proxy" what do you get back?