PeterLee,
Ipsec is used for tunneling user traffic only for an access point that is configured as a Remote AP. Turning on CPSEC only puts the control plane, which is not user traffic, into an ipsec tunnel. You will only see the IPSEC number on the monitoring page for RAPs, because the user traffic is in an ipsec tunnel. You will not see the IPSEC number because CPSEC is on, because CPSEC does not turn on ipsec tunneling for user traffic.
I hope this helps.