FreeRADIUS

FreeRADIUS Integration

Keep your existing FreeRADIUS where it works, or move selected access workflows to Managed RADIUS early access after tenant launch signoff.

Managed RADIUS guide
Connector health

Integration status and evidence

paths online
3
actions queued
18
critical fails
0
RADIUSPolicy sync and CoAOK
RouterMikroTik command previewOK
CPEProtocol agent telemetryOK
Every connector action shows owner, object, result, and recovery evidence.
Page type
Integrations
Primary search
FreeRADIUS billing
Updated
2026-06-07

Billing and RADIUS must agree

When invoices, payments, plans, and RADIUS policies are disconnected, support teams spend time explaining why a customer paid but still cannot connect.

ISPAgents should connect billing state to access policy only after the operator has mapped subscribers, NAS devices, policy names, CoA behavior, and rollback expectations.

RADIUS rollout patterns

PatternDescription
Existing FreeRADIUSValidate the operator's current FreeRADIUS tables, policies, or workflow before writes.
Managed RADIUS early accessUse the ISPAgents-operated shared plane after tenant validation, launch signoff, health checks, and operational support gates.
Hybrid rolloutKeep existing FreeRADIUS while moving selected plans, sites, or customers gradually.
Router fallbackUse MikroTik direct control only when RADIUS is not the right enforcement path.

What ISPAgents adds

  • Billing-driven access-state evidence.
  • Plan-to-policy mapping.
  • CoA restore and disconnect flows only where the NAS and tenant policy support them.
  • Support evidence for blocked, online, slow, or mismatched users.
  • Regional RADIUS health visibility.
  • Connector health and audit trails.
  • Migration path from existing RADIUS servers.

FAQ

Do we have to move away from FreeRADIUS?

No. Existing FreeRADIUS support is important because many ISPs already have production RADIUS deployments. ISPAgents should integrate first and migrate only when the operator wants managed infrastructure.

When does managed RADIUS make sense?

Managed RADIUS makes sense as commercial early access after the ISP validates the cloud auth path, NAS secrets, failover behavior, support evidence, and tenant launch signoff.

Next step

See how this works in your network.