So you have three sites and HQ, right? Does each site has its own Internet connection or they connect to the HQ for Internet access? UM is an AAA system. If your network design is not correct, UM won’t receive requests from your RB, thereby users not being able to login to have Internet access.
Please produce enough information on your network design.