radius problem after enabling encryption on mpls wan link

[Andrey128]

there are several sites with wifi access points connected via flexconnect to central site with WLC.

After encryption has been enabled (MTU reduced) on mpls wan links, all access points on remote sites could not authenticate users via radius. Only reboot/reset of these remote access points helped.

Is it per design access points cannot recognize that MTU has been reduced ? 

Is radius traffic from remote flexconnect AP towards WLC goes inside CAPWAP or in a separate way?

[Rasika Nayanajith]

Is radius traffic from remote flexconnect AP towards WLC goes inside CAPWAP or in a separate way?

Does WLAN configured for FlexConnect Local Switching & Central Authentication ? If that is the case Authentication packet should go to WLC via CAPWAP encapsulated (assume APs are not in standalone mode).

HTH

Rasika

*** Pls rate all useful responses ***