When using Microsoft NPS for RADIUS authentication the tunnel used for EAP may increase the RADIUS payload beyond the standard MTU and the packets become fragmented.

This may cause problems are the fragmented packet traverses the network.

To overcome this the “Framed-MTU” attribute can be defined to ensure the packets aren’t fragmented.