You have several options for FlexConnect: local/central switching, local/central authentication.
In your case, i think, local swithing with central auth is fine. In this case AP send RADIUS request to WLC and WLC sent request to RADIUS server. But you can use local auth too. In this case AP will sent RADIUS request directly to RADIUS server.
Step 1 Choose WLANs to open the WLANs page.
Step 2 Click the ID of the WLAN. The WLANs > Edit page appears.
Step 3 Click the Advanced tab to open the WLANs > Edit (WLAN Name) page.
Step 4 Select the FlexConnect Local Switching check box to enable FlexConnect local switching.
Step 5 Select the FlexConnect Local Auth check box to enable FlexConnect local authentication.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...