enter image description hereWe are troubleshooting an issue with 802.1X computer authentication using EAP-TLS and would like to understand whether this behavior is MTU-related.
• During computer authentication, the client does not appear to send its machine certificate when the default MTU (1500) is used.
• On Cisco access switches, the client is able to send its machine certificate only after the global/system MTU is increased to 3000.
• With Juniper EX2300 switches, using the same clients and FreeRADIUS configuration, the client similarly does not send its machine certificate during the EAP-TLS exchange.

Is this a known limitation or expected behavior related to MTU or EAP-TLS frame handling on access switches, particularly on Juniper EX2300?
Are there any recommended MTU or platform-specific configurations for reliable EAP-TLS computer authentication?