IDNET Radius Manager

Manage Hotspot, RADIUS and Internet Logging from One Platform

IDNET Radius Manager is a centralized hotspot and network-access management platform developed for hotels, dormitories, schools, factories, offices, cafes, restaurants, hospitals, residential sites and businesses offering public internet access.

The platform combines user authentication, authorization, internet-access policies, session monitoring, traffic accounting, user lifecycle management, Syslog records and reporting within one web-based management interface.

Designed to operate with MikroTik and compatible network infrastructures, IDNET Radius Manager helps organizations manage devices installed across different branches and facilities from a central location.

Speed, quota, connection duration and simultaneous-session rules can be assigned to users. Its PostgreSQL-based architecture stores user, session and log records in an organized structure.

What Is IDNET Radius Manager?

IDNET Radius Manager is an enterprise RADIUS and hotspot-management solution that verifies users requesting network access, determines their access conditions and records their sessions.

When a user connects to a Wi-Fi or hotspot network, the network device sends the user's credentials to IDNET Radius Manager. The system validates the user, identifies the correct access profile and returns an access decision.

After connection, session duration, data consumption, access device and start and completion times can be recorded through RADIUS Accounting.

What Is a RADIUS Server?

RADIUS is a standard protocol that centrally manages authentication, authorization and accounting for users and devices connecting to a network.

Authentication verifies the user's credentials. Authorization assigns speed, quota, VLAN, connection duration and similar policies. Accounting stores session-start, update and termination records.

This structure allows common user and access policies to be applied across access points, routers, switches, VPN gateways and hotspot devices.

MikroTik Hotspot Integration

IDNET Radius Manager is designed to operate with MikroTik hotspot infrastructure.

MikroTik devices send authentication requests to the RADIUS server. After successful validation, speed, access duration, data quota and simultaneous-session limits can be returned to the device.

Fields such as MikroTik-Rate-Limit can define different download and upload speeds for users and profiles.

Multiple MikroTik routers and hotspot gateways can be managed through the same platform.

Unlimited NAS and User Management

Multiple NAS devices installed across different facilities, branches and locations can be added to the platform.

A NAS is the router, access point, switch, VPN gateway or similar device providing network access.

Device name, IP address, shared secret, location and description can be defined for each NAS.

Users can be restricted to specified NAS devices or network groups.

User Lifecycle Management

Users can be created, updated, activated, deactivated and deleted through one interface.

Start date, expiration date, access-termination date, profile and simultaneous-session limit can be assigned to each account.

Expired accounts can be deactivated automatically. Scheduled operations can disable access on a selected date.

Bulk creation, profile changes and deactivation features simplify operations in high-volume environments.

Profile-Based Speed and Quota Policies

Different access profiles can be created instead of defining policies individually for every user.

Download and upload speed, total traffic quota, session duration, simultaneous connections and validity period can be configured for each profile.

Separate profiles can be prepared for guests, employees, managers, students, long-term residents and event users.

RADIUS Authentication

IDNET Radius Manager validates network-access requests through RADIUS Authentication.

User credentials are transferred through an Access-Request message. Account status, validity dates, profile and access policies are checked.

The system returns Access-Accept for valid requests and Access-Reject for invalid requests.

It can be configured for environments using PAP, CHAP and MS-CHAPv2 authentication methods.

RADIUS Accounting

User connection duration and traffic information can be monitored through RADIUS Accounting.

A start record is received when the session begins, interim updates while it remains active and a termination record when it ends.

NAS device, IP address, MAC address, session start, end, total duration and consumed data can be reported.

CoA and Disconnect Support

IDNET Radius Manager supports Change of Authorization and Disconnect operations for managing active sessions.

An active session can be terminated automatically when the user's quota or access period is completed.

Updated speed and access policies can be applied to an existing session after a profile change.

Authorized administrators can also disconnect selected sessions manually.

Hotspot Registration Workflows

Hotspot users can register through workflows defined by the organization.

Username and password, telephone number, SMS validation, national identity number, passport, room number, PIN code or custom fields can be used.

Registration pages can be customized with the organization's logo, colors, content and terms of use.

SMS User Verification

A one-time verification code can be sent to the user's mobile telephone number.

The user enters the code on the hotspot registration page to verify the account and obtain internet access.

SMS-provider integration can be implemented according to the messaging service used by the organization.

Identity-Controlled Registration

A basic algorithmic validation can be applied to Turkish national identity numbers entered during registration.

Incomplete or algorithmically invalid numbers can be rejected.

Name, surname, telephone, terms acceptance and other required information can be collected together with the identity number.

Personal-data processing, storage and access permissions should be configured according to applicable privacy obligations.

Internet Logging for 5651-Oriented Requirements

IDNET Radius Manager includes a logging infrastructure that helps organizations store internet-access records in an organized manner.

Authentication, RADIUS Accounting, NAS, IP, MAC address and session-start and termination information can be stored in PostgreSQL.

Syslog records received from network devices can be collected centrally and stored in a separate logging database.

Technical and legal requirements may differ according to the organization's activity, architecture and current regulations. Deployment should therefore be reviewed with qualified legal and information-security professionals.

Built-In Syslog Server

IDNET Radius Manager includes a built-in listener for Syslog messages generated by network equipment.

Firewall, NAT, connection, fault and system records from MikroTik and compatible devices can be collected centrally.

Syslog data can be stored in a separate high-volume database and filtered by device, date, IP address and message content.

Log Signing and Integrity Verification

Exported log files can be digitally signed for integrity verification.

A verification operation can determine whether a signed file was modified after export.

Logs can be exported in JSON and CSV formats.

Live Session Monitoring

Active internet users can be viewed through the management panel in real time.

The connected NAS, IP address, MAC address, session start, duration and traffic values can be reviewed for every user.

Administrators can see the number of connected users by NAS and disconnect sessions when required.

Connection Duration and Quota Monitoring

Daily, weekly, monthly or total internet-access duration can be limited.

Download and upload traffic can be monitored, and access can be terminated or moved to another profile after reaching the defined quota.

Limited and unlimited profiles can be created, while account-validity dates and remaining access periods can be monitored.

Expired-User Monitoring

Expired accounts can be displayed in a separate list.

Accounts expiring within one week or another selected period can be reported in advance.

This feature simplifies account management for long-term accommodation, employees, students and subscription-based access services.

Hotel and PMS Integrations

IDNET Radius Manager can create hotspot users automatically from guest information obtained from hotel-management software.

When a guest checks in, room, name, arrival date and departure date can be imported from the PMS.

The account-expiration date can be assigned according to check-out information. The account can be deactivated or deleted after departure.

Integrations can be developed for ElektraWEB, AthenaWEB, Atoz, HotechWEB, HotechWEBOtello, Livinsoft, OperaWEB and other API-supported PMS platforms.

User Import from Different Data Sources

User information can be collected from different databases and files in addition to PMS platforms.

MSSQL, MySQL and Oracle databases can be connected. Excel, TXT, XML and JSON files can be processed.

Mapping, testing, debugging and execution can be managed separately for each source.

Scheduled tasks can add, update or deactivate users automatically.

Automatic Upsert and Synchronization

Users received from external systems can be processed through an automatic upsert workflow.

New records are created while existing accounts are updated.

Users no longer valid in the source application can be deactivated or deleted according to configured rules.

REST API and JWT Authorization

IDNET Radius Manager provides a REST API for integration with external software.

JWT-based authentication can restrict API access securely.

NAS and user records can be created and updated, logs can be filtered and log-signing operations can be managed through the API.

Hotel, school, human-resources, membership, mobile and custom web applications can integrate with IDNET.

18-Language Support

IDNET Radius Manager supports Turkish, English, Arabic, Russian, German, French, Spanish, Portuguese, Italian, Dutch, Polish, Greek, Bulgarian, Ukrainian, Chinese, Japanese, Korean and Persian.

The system can automatically detect the user's browser language and select the appropriate interface.

Additional languages can be added through JSON-based language files.

Page Analytics

User behavior on hotspot portals and custom landing pages can be analyzed.

The system can report which pages a user visited, how many times the page was opened and how long the user remained on it.

This information can support measurement of campaign, information and digital-welcome pages.

Customizable Captive Portal

The hotspot login interface can be customized according to corporate identity.

Logo, background, information text, terms, campaign images and contact details can be changed.

Different designs can be prepared for hotels, restaurants, cafes, schools and event spaces.

Role and Permission Management

Different roles and permissions can be assigned to management-panel users.

Accounts can be created for administrators, reception teams, technical support, network managers, reporting users and read-only users.

Permissions for creating users, deleting users, disconnecting sessions, managing NAS devices, viewing logs and exporting records can be controlled separately.

Centralized Management Dashboard

Users, profiles, NAS devices, active sessions, logs and integrations can be managed from a web-based panel.

Managers can view total users, active sessions, connected NAS devices, expired accounts and critical events through summary screens.

Windows, Linux and Docker Support

IDNET Radius Manager can operate on Windows, Linux and Docker environments.

Windows can support rapid integration with existing corporate systems.

Linux is suitable for stable, service-based and continuously operating server environments.

Docker provides fast deployment, portability, simplified updates and separation of testing and production environments.

PostgreSQL-Based Data Infrastructure

IDNET Radius Manager uses PostgreSQL for user, session, profile and system records.

It can be installed with PostgreSQL 13 and later versions.

Separate Syslog databases, batch inserts, partitioning and service-based architectures can be applied to high-volume environments.

Service Architecture and Ports

• Default HTTP API port: 3000
• Default RADIUS Authentication port: 1812
• Default RADIUS Accounting port: 1813
• Default Syslog UDP port: 514
• Default CoA and Disconnect port: 3799

Ports can be changed according to firewall and network policies.

On-Premise Installation and Data Control

IDNET Radius Manager can be installed on the organization's own local server.

User, session and log records can remain on infrastructure controlled by the organization.

Local RADIUS and management services can continue operating even during an external internet outage.

Multi-Branch and Multi-Facility Management

NAS devices installed in different branches, hotels, schools and business locations can connect to the same IDNET Radius Manager platform.

Devices can be grouped by branch, location, usage type and customer structure.

Central administrators can view all facilities, while branch users can be restricted to their own users and sessions.

Hotel Hotspot Management

Hotel guest accounts can be created automatically according to PMS records.

Guests can sign in using room number, surname, telephone verification or other business-defined credentials.

Internet access can be limited to the accommodation period and disabled automatically after check-out.

Dormitory and Student Internet Management

Students can be imported from school and dormitory applications.

Speed, monthly quota and simultaneous-device limits can be assigned to every student.

Accounts can be deactivated automatically when students leave the dormitory or their registration ends.

School and Campus Networks

Separate access profiles can be prepared for students, teachers, employees and guests.

Different speed, duration, VLAN and access policies can be applied to each user group.

Multiple buildings and access-point infrastructures can be managed through one RADIUS system.

Cafe and Restaurant Hotspot

Customers can receive controlled internet access through SMS, telephone number or PIN codes.

Connection duration, quota and speed can be restricted according to the business policy.

Campaigns, menus, social-media accounts and announcements can be shown on the landing page.

Factory and Corporate Guest Networks

Employee networks, production equipment and guest internet access can be separated.

Visitors can receive temporary hotspot accounts, while contractors can be restricted to the required networks.

Guest accounts can activate and expire automatically according to visit times.

Residential and Shared-Living Environments

Different profiles can be created for residents, management personnel, security teams and visitors.

Accounts can be assigned by block, apartment and user. Temporary visitor codes can be generated.

Event and Organization Internet

Temporary hotspot users can be created for conferences, fairs, festivals and corporate events.

Bulk PIN codes, SMS verification or registration forms can provide short-term internet access.

All event accounts can be deactivated automatically at the end of the event.

Custom Software Integration

IDNET Radius Manager can integrate with custom web, mobile and desktop applications.

Membership, human-resources, customer, reservation and visitor-management systems can create user accounts through the API.

ERP and Enterprise System Integration

Employee, customer, dealer and membership records can be collected from ERP and enterprise applications.

A network account can be created when a new employee is registered and deactivated after employment ends.

Integration can be implemented through REST APIs, MSSQL, MySQL, Oracle, JSON, XML, Excel and other data sources.

Automated Notifications

Notifications can be generated for NAS disconnection, service faults, logging interruption, expired users and unexpected session behavior.

Messages can be sent to technical teams through email, SMS or other business communication platforms.

Reporting and Export

User, session, NAS, profile, traffic and log records can be reported through detailed filters.

Reports can be filtered by username, date, IP address, MAC address, NAS, profile and connection status.

Data can be exported in JSON and CSV formats. Custom Excel and PDF reports can also be developed.

Example Hotel Application

When a guest checks in, the PMS transfers the name, room number, arrival and departure dates to IDNET Radius Manager.

The system creates a hotspot account automatically and assigns a profile matching the accommodation period.

The guest connects using room and surname or telephone verification. Session details are stored through RADIUS Accounting.

The account is deactivated automatically after check-out.

Example Corporate Guest Network

Security or reception personnel create a temporary hotspot account for a factory visitor.

The user is directed only to the guest VLAN and cannot access corporate or production networks.

The account expires automatically at the scheduled end of the visit.

Example Student-Dormitory Application

Student records are transferred from the dormitory application through a scheduled integration.

Every student receives a profile containing speed, monthly quota and simultaneous-device limits.

When a student is deactivated in the source system, the hotspot account is disabled automatically.

Measurable Success Indicators

• Centralized hotspot-user management
• Common access policies across multiple NAS devices
• Automated SMS, identity and PMS registration workflows
• Real-time monitoring of active sessions
• Application of duration, speed and traffic quotas
• Automatic deactivation of expired accounts
• Central storage of RADIUS Accounting and Syslog records
• Signed log exports
• Management of multiple branches and facilities
• Reduced manual account creation and termination
• User synchronization with PMS and enterprise applications
• Faster network-management and reporting operations

Why IDNET Radius Manager?

IDNET Radius Manager is more than a RADIUS server for username and password validation. It combines account creation, profile policies, traffic management, session accounting, Syslog, signed logging, PMS integrations and reporting.

Windows, Linux, Docker and on-premise deployment options allow the system to adapt to different infrastructures.

The platform can begin with one facility and expand through additional NAS devices, branches and user groups.

An IDNET Project Customized for Your Business

Every organization has different network infrastructure, user-authentication workflows, logging requirements and source applications.

Before deployment, MikroTik and network devices, user volume, branch structure, access profiles, PMS integrations, data sources and retention requirements are analyzed.

A pilot can begin with a limited number of NAS devices and users. After authentication, Accounting, CoA, Syslog and integration workflows are validated, the platform can expand across the complete organization.

For detailed information and a customized project request, visit the IDNET Radius Manager project page.