Net2Net Local RADIUS Manager

Standalone, per-WISP RADIUS management software for MikroTik PPPoE networks. It replaces MikroTik User Manager, integrates with the WISP's local UISP CRM, and provides branded portals for Net2Net, WISP staff, and customers.

Current milestone

The first working scaffold includes:

• FastAPI service with health, bootstrap, dashboard, package, subscriber, router and IP-pool endpoints
• PostgreSQL-first schema designed to coexist with the standard FreeRADIUS SQL tables
• React/Vite web dashboard with permanent Net2Net sub-branding
• Windows + WSL2 bootstrap scripts (no Docker)
• Explicit boundaries for UISP sync, MikroTik API, CoA and User Manager import work

Docker / Unraid beta

The container runs the web portal, management API and RADIUS authentication/accounting service in one local WISP appliance. It persists all operational data under /data.

Ports:

• 8080/tcp — administrator and client portal
• 1812/udp — RADIUS authentication
• 1813/udp — RADIUS accounting

Before the first start, set the initial Super Admin and WISP Admin passwords. Those are used only when the database is empty. After signing in, set the Application secret, RADIUS shared secret and UISP API settings under Settings → Local platform secrets. Include the mapped /data directory in the Unraid backup schedule.

For a local Docker test:

Copy-Item .env.example .env
# Replace every secret in .env first.
docker compose up --build

Open http://SERVER-IP:8080. The manual Unraid import template is unraid/net2net-local-radius.xml. It is intentionally a beta template until an image registry and final public repository URL are selected.

The Super Admin can create and download consistent SQLite backups from Settings → Backup and move. The backup includes local platform settings. The container retains the latest 14 backups by default. For a complete server migration, stop the old container, copy its mapped /data appdata folder, deploy the new container, restore the backup from the web interface, and point MikroTiks to the new RADIUS address.

Run the development build

Web interface

cd apps/web
npm install
npm run dev

Open http://localhost:5173.

API (Windows preview)

cd apps/api
python -m venv .venv
.venv\Scripts\Activate.ps1
pip install -e ".[dev]"
Copy-Item ..\..\.env.example ..\..\.env
uvicorn app.main:app --reload --port 8000

The API uses in-memory preview data until DATABASE_URL is connected in the next milestone. Open http://localhost:8000/docs.

WSL2 services

Run PowerShell as Administrator:

.\scripts\install-windows.ps1

The installer enables WSL2/Ubuntu when needed and then installs PostgreSQL, FreeRADIUS, its PostgreSQL driver, Redis, Python and supporting tools inside Ubuntu. It intentionally does not alter any MikroTik router.

Operating model

• One isolated installation per WISP
• WISP-specific branding with permanent "Powered by Net2Net Local RADIUS Manager"
• UISP is the CRM and billing source of truth
• A confirmed UISP customer can own multiple PPPoE services
• UISP suspension throttles every linked PPPoE service to 8k/8k
• Packages show advertised rates while storing separate provisioned rates (for example 5/5 displayed, 6/6 provisioned)
• Private and public address pools allocate the next available address
• Routers are registered manually by OSPF loopback IP and use the internal RouterOS API

See docs/architecture.md for the working architecture and delivery stages.