I had success setting up a test made of OC200, EAP600, Windows Server using NPS to authenticate clients using WPA Enterprise with EAP-TLS.

However, the requests to the windows radius server originate from the individual APs, not from the Controller (as I would expect) - however the radius secret which I entered into the OC200 is used.

Now, If I want to setup a larger network, I had to enter all accesspoints IPs (which even might not be static) into the Windows settings where the radius client is defined.

Is there a setting where I an enable the controller to do the authentication on behalf of the acesspoints?