Hi. Thank you for reply.
I thought same thing could be possible, so i created an other user on mysql server.
I connected directly to USG on the Public IP of its (no VPNs now)
I performed radiusd -X . . .
....
        User-Name = "vito"
        User-Password = "catozzo"
        NAS-IP-Address = 172.16.68.10
        NAS-Identifier = "weblogin"
        NAS-Port = 24081
        NAS-Port-Type = Virtual
        Service-Type = Authenticate-Only
        Calling-Station-Id = "78.aa.bb.148" <- this is my current IP address at home

....

My Daloradius NAS reports the two NAS, addresses of WAN2* and WAN1** of USG in HQ
LAN1  of USG is 172.16.68.253.
Server WIn2003 has 172.16.68.10. Has a Radius on, but  users are created by a VB client i developed some yrs ago, with only numers and dots on both username and password for eache user. No way to have vito/catozzo on :-)

ID NAS
NAS IP/Host
Diminutivo NAS
Tipo NAS
Porte NAS
NAS Secret
Descrizione NAS
3 89.aa.bb.cc o-fw* other 0 myshared
6 79.dd.ee.ff o-tvc** other 0 myshared