RADIUS and MikroTik management
RADIUS in Veloxiom is not an integration: subscriber plans, IP assignment, suspension state and live sessions are the same records the billing engine works on. That is what makes a plan upgrade a live Change-of-Authorization instead of a maintenance task.
Authentication and authorization
- PPPoE and DHCP/IPoE subscribers from one place, with per-plan rate limits including burst, priority and per-session limits.
- Address assignment from pools or static per subscriber, plus IPv6 prefix delegation for dual-stack networks.
- CoA and disconnect on live sessions — change a plan without dropping the customer, or move a session into a walled-garden address list.
- Accounting with Start/Interim/Stop records, live session view per subscriber and the last disconnect reason on the customer record.
- Multi-vendor attribute sets: MikroTik RouterOS as first-class, plus other common BNG vendors.
Router and CPE management
Routers are managed from the panel: interfaces, PPPoE profiles, queues, firewall context and health, with SNMP polling for traffic and uptime. Subscriber CPE can be provisioned over TR-069 (CWMP) so PPPoE credentials, Wi-Fi and WAN settings are applied without a technician visit, and GPON OLT/ONU ports — including optical RX/TX levels — are visible next to the subscriber they serve.
Operations that stop being manual
- Suspension for non-payment as a real CoA to a captive portal, and automatic reconnection the moment a payment is matched.
- Plan changes, speed upgrades and temporary boosts applied to live sessions.
- Static IP and IPv6 assignments tracked in IPAM instead of a spreadsheet.
- Auth-Reject reasons recorded, so "the customer cannot connect" is a lookup rather than an investigation.
Frequently asked questions
Do I need a separate FreeRADIUS server?
No — but either model works as long as users, speeds and suspension state come from the billing database, so there is never a second list of subscribers.
Can I change a subscriber's speed without disconnecting them?
Yes, with CoA on the live session. If CoA is not enabled on the router, the change requires a reconnect.
Does it work with vendors other than MikroTik?
Yes. The logic is the same and the vendor-specific attributes are sent per NAS, with MikroTik covered in most depth.
What happens to subscribers if the panel goes down?
Established sessions keep working. Design your deployment so authentication has a secondary path — a single RADIUS endpoint means a maintenance window blocks new connections.