Controllerless Networks

Is it possible to have a read-only account on Instants?

Is it possible to setup with radius and a VSA being returned?  I've done this with a controller, but not an Instant cluster yet.

Thanks

Yes it is possible.  Radius with fallback to localdb.

Note, this is fallback not fail-through.  I managed to lock myself out, but got the radius guys to disable the VC as a radius client and managed to get back in.

:-)

This is a read-only account to access the IAP web gui correct?

I haven't played with them yet, shortly I will, new deployment requiring them.

Therefore in order to provide a read-only account on the IAP is to do it through radius?

Yeah, I believe this is the only way.

I am yet to test, but need the radius guy online in case I lock myself out again.

:-)

:) Cannot do internal radius??? with internal db user?

Now with Instant 4.0, you can now have a readonly account without any funky workarounds.

See below: