Hostapd uses wrong origin IP for radius request

Hey, I'm using OpenWRT 19.07.8 on an TPlink Archer C7v2.

I've configured a tinc VPN on the device to connect to the radius server. The interface is configured as dhcp client in LUCI.
The wireless interface is configured to connect to the radius server on the internal network.

/etc/config/wireless:

config wifi-iface 'wifinet1'
	option device 'radio1'
	option network 'lan'
	option mode 'ap'
	option ssid 'ssid'
	option encryption 'wpa2'
	option auth_server '10.0.10.1'
	option auth_port '1812'
        option auth_secret 'omitted'

Routing Table (excerpt):

default via 1.2.3.4 dev pppoe-wan 
10.0.4.0/24 dev br-lan scope link  src 10.0.4.1 
10.0.4.0/24 dev br-lan scope link  metric 32 
10.0.10.0/24 dev tincvpn scope link  src 10.0.10.11 
1.2.3.4 dev pppoe-wan scope link  src 1.2.3.3
192.168.1.0/24 dev eth0 scope link  src 192.168.1.2 

But the router connects with its WAN IP to the radius server (through the vpn tunnel), after about 11 retries, it uses its private IP on the VPN tunnel to connect to the radius server and the authentication succeeds.
Error: Ignoring request to auth address * port 1812 bound to server default from unknown client 1.2.3.3 port 54969 proto udp

Is there a way to tell the router to use the ip of a specific interface for its outgoing connections? Or better to use the interface IP for the corresponding route.