Unifi and Radius Server Issue

We have our Unifi Dream Machine Pro and Access Points on VLAN 1 and its own interface on pfSense. We have VLAN 100 which servers our internal LAN, which is on a separate interface on pfSense.

Once we made these changes we cannot get Radius authentication from VLAN 1 APs through to VLAN 100 to the radius server.

I am sure we are missing a simple firewall rule or something.

Also, we can ping the Radius server from SSH on the APs and UDM Pro.

Thank you, Blane