So here is the lay out all RBs are using 4.11:


INTERNET:
RADIUS SERVER ZZ.ZZ.ZZ.125
|
|
\|/
V
external address:xx.xx.xx123
DSTNAT MASQ
internal address:192.168.xx.1
|
|
\|/
V
WANside address:192.168.xx.5
DSTNAT MASQ
LANside address:10.5.7.1
|
|
\|/
V
Hotspot user:10.5.7.220 trying to auth to zz.zz.zz.125

-----------END of DIAGRAM----------

How do I get the RADIUS to auth if MT does not like the double NAT MASQ scenario?
Can I do a VPN tunnel if so how would I do it?

-Sincerely,
DesertAdmin