I see there is a default checked option called”Disable Local Authentication" when I adding KN from CC2000, what is the purpose of the feature?

The feature let you set only allow access KN from CC2000 and cannot access directly to the KN.