i have tried userman configuration, but i have a problem with the external NAS ip address, in my scenario, every day the IP address of the external hotspot Change and is possible to accept radius request from every IP Address.Dear,
You have to setup Userman first.
Or in the same router (not recommended) or in a separate router (device) or VM.
Read the documentation of Userman how to setup subscribers, profiles, routers, users, etc...
Then in the AP in winbox menu Radius put IP address of Userman + secret and rest of config.
This should work but you have to read the manuals first.
Yes i know this solution, but is not good for my request becaus some device doesen't support VPN (Cloud Device)... but is possibile add a subnet in the nas ip addresS?In order to get everything working well you need public fixed IP addresses on all sites.
Another solution is to make VPN's to your central point if this is possible and then you're authenticating through a fixed connection with fixed IP address.
I don't know about UserMan, but FreeRADIUS lets you do that.
Do realize that it can be a security weakness because if someone captures your RADIUS secret, they can connect to your server from that same range and start making brute force attempts on your passwords.