The masquerade fix given in an old thread here was helpful but only locally (duh 
). I have CHR with User manager and trying to use it as RADIUS for my whole network behind it. So I have a public IP and trying to authenticate via RADIUS other Mikrotik in network. However still getting timeout :-/ Can you guys help with it please? Is it NAT or some firewall rule I need to add?