NAS devices

A NAS (Network Access Server) is the router or access concentrator that your subscribers connect through — typically a MikroTik, but also Cisco, Huawei, ZTE and others. In the CRM they live under Network > NAS Devices, where you register each device, set its RADIUS shared secret and attach IP pools. Once a router is registered here, subscriber logins can authenticate against RADIUS and appear under Online Users.

The router list

The page is titled Routers and lists every device with its Title, IP/Host, NAS Type, attached IP Pools, Partner, Location and Status. The Status column reflects a live reachability check — press Refresh to re-ping every device. Use the search box to find a router by title or IP, and the Actions column to edit or delete one.

Adding a router

Click Add Router to open the editor. On the Main tab give the device a Title, optionally assign it to one or more Partners and a Location, and enter its IP/Host (and an optional separate NAS IP used as the RADIUS NAS-IP-Address). Pick a NAS Type — the list covers MikroTik, MikroTik-Hotspot, Cisco-IOS, Huawei, ZTE, Ubiquiti, Juniper, Nokia-ALU and more — then choose the Authorization Type and Accounting method. Assign the IP Pools this router should draw from and set the Status to Active or Disabled.

RADIUS settings

The RADIUS tab holds the RADIUS Secret (the shared secret that must match your router's RADIUS client configuration), plus the Auth Port, Accounting Port and CoA Port. The CoA port matters: it is what the CRM uses to send Change-of-Authorization disconnects when a service is blocked or suspended. The PPP Secrets option controls whether the CRM manages PPP secrets for this device.

MikroTik API & authorization

For MikroTik and MikroTik-Hotspot devices a third MikroTik API tab appears. Enable the API, set the API Port, optional Use SSL, and the API Login and API Password, then test the connection. The chosen Authorization Type decides how the CRM manages the router: PPP/DHCP (Radius) and Hotspot (Radius) let the router authorize via RADIUS, while Firewall IP-MAC, DHCP (Leases), PPP (Secrets) and Hotspot (Users) have the CRM push firewall rules, DHCP leases, PPP secrets or hotspot users over the API. Optional PCQ Queues and contention settings are also managed here.