Optional FreeRADIUS Integration

RADIUS is strictly opt-in, per server. API and RADIUS routers run side by side in one deployment, and the system routes each operation automatically. Importing a NAS marks the server as RADIUS-managed.

NAS Restriction Modes — Locked (one router), Roaming (any) or Zone — go beyond pure MikroTik. Deactivation injects Auth-Type := Reject and fires a CoA Disconnect to drop the live session instantly.