When you user site configuration with local RADIUS authentication, the authenticator is moved to the AP, not the controller. (as you can see in the screenshot REN1AIR000x are APs Name)
but it this case, if AP are counted as devices in NMS, the licensing price will be huge (customer got around 300 AP on multiple site)
I hope there is a way to make the AP count from AP license count and use local radius authentication.
We need this design to deliver local authentication (local NAC Gateway& Active Directory) because of multiple factor:
- bad WAN links causing authentication stale or failure
- some remote site with over 2000 users with lot of connection/disconnection (app testing purpose)