This is what I see for martin, you can see every 1 or 2 minutes, radius server is getting auth request
Sep 24 11:47:04 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)
Sep 24 11:47:04 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)
Sep 24 11:47:06 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)
Sep 24 11:47:06 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)
Sep 24 11:47:28 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)
Sep 24 11:47:28 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)
Sep 24 11:47:35 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)
Sep 24 11:47:35 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)
Sep 24 11:48:10 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)
Sep 24 11:48:10 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)
Sep 24 11:48:14 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)
Sep 24 11:52:21 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)
Sep 24 11:52:21 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)
Sep 24 11:57:48 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7 via TLS tunnel)
Sep 24 11:57:49 radiusfront1 radiusd[28569]: Login OK: [martin] (from client acesspoint13 port 0 cli 97-d5-c7-8e-06-g7)