Hello @MR.S,

The current mechanism of SDN Controller is that the RADIUS Server does not differentiate between requests from the controller itself and external requests, nor does it support distinguishing different Sites.

MR.S wrote

 users in Site-A can log in with radius accont in Site-B this is not so good. it means that users have access to the network in the Site that they should not have access to.

As a result, it responds to all requests, which is the issue you mentioned above. Thanks for your valuable feedback, you may also post it on the Requests & Suggestions Section for others to vote.