Generic udp proxy: public bordermanager ip address to internal freeradius
address
Access rule: allow any to any on port 1812

Massages get in from public to freeradius.
Freeradius authenticates and send message back to internal bordermanager
ipaddress.
But messages never reach external address.