There is (currently) no VPN in between.
For testing purposes its just another subnet in my office. So MTU shouldn't be a problem.
After the reset, the AP gets a remote IP address via DHCP and also the EWC IP via DHCP Option 78.
THe AP connects to the EWC and appoves it:

But it is still not active
The LED states on the AP are:
Left: solid green
Center: blinking green
Right: off
Documentation says: "Connecting to Enterasys Wireless Controller: Upgrading to higher version"
The AP console session shows the following:

There is no 802.1x configruation on the Switch-Port.