Radius authentication fails when Radius server is load balanced on NetScaler.
To resolve this issue change the Radius client from NSIP to SNIP on the Radius server.
Netscaler uses the NSIP as a source IP to contact an authentication server. If those servers are configured as a LB service/ Service group and a Load Balance virtual server is used, the Netscaler usese the SNIP to communicate those back-end servers.