What address and port do I point my equipment at?

Two places, and they are deliberately not the same one. The site's **Connect** tab lists both of our endpoints — a primary and a secondary — with the port, and the controller steps for entering them. The site's **Transports** tab is where the shared secret lives, because that is where you switch the transport on. Put both endpoints into the RADIUS profile on your equipment, in the order shown.

Do not copy the values out of this page or a walkthrough into a second site. The shared secret is per site by design, so that one site's credential being exposed is one site to re-key rather than all of them.