Managed RADIUS should reduce operational load
FreeRADIUS is powerful, but operating it well takes discipline: backups, regional latency, secrets, NAS configuration, policy mapping, accounting, health checks, and safe change control. Small ISPs often want the control of RADIUS without owning every server and failure mode.
ISPAgents Managed RADIUS should provide a cloud-managed option connected to billing, payments, support, audit, and router operations.
Managed RADIUS capabilities
| Capability | Why it matters | |---|---| | Billing-driven policy | Paid, overdue, suspended, restored, upgraded, and downgraded states map to access rules. | | Regional RADIUS | Put authentication closer to the network and monitor regional health. | | CoA workflows | Disconnect or update sessions where the NAS and network design support it. | | NAS management | Track MikroTik routers, secrets, site mapping, and expected policy behavior. | | Hybrid rollout | Keep existing FreeRADIUS while moving selected sites or plans to managed RADIUS. | | Audit evidence | Show who changed policy, what was applied, and what the subscriber experienced. |
Existing FreeRADIUS still matters
Managed RADIUS should not force every operator to migrate immediately. Many ISPs already have working FreeRADIUS deployments. ISPAgents should support:
- Read and write integration with existing FreeRADIUS workflows where suitable.
- Migration from existing tables, groups, profiles, and policy names.
- Gradual movement by site, router, package, or customer segment.
- MikroTik direct-control fallback when RADIUS is not the right enforcement method.
FAQ
Is ISPAgents a RADIUS service?
ISPAgents should offer managed RADIUS as one access-control option. It should also integrate with existing FreeRADIUS and MikroTik direct control because ISP networks are not all designed the same way.
Can managed RADIUS work with MikroTik?
Yes. MikroTik can act as a NAS in RADIUS-based networks, and ISPAgents can also use direct RouterOS control when the operator needs queues, address lists, or site-specific logic outside RADIUS.