Skip to content
Dream Radius

Dream Radius · The ISP CRM with FreeRADIUS inside

The CRM's tables are the RADIUS tables.

The multi-tenant CRM that runs your ISP end to end: FreeRADIUS AAA, six nested reseller tiers with prepaid wallets, packages, NAS control and billing — one system where the authorize query and the invoice read the same tables.

Book a demoStart a free trialFrom $17 / month · priced by subscriber capacity and nas count

Product tour

One workspace for every ISP workflow.

From provisioning a new PPPoE user to reconciling a month of invoices — every operation lives inside a single, keyboard-fast interface.

app.dreamradius.com
Dream Radius dashboard — live business overview with customer, session and revenue KPIs

Dashboard

Live KPIs, bandwidth, revenue and router health at a glance.

Overview
also in the workspaceHRMLedgerActivity LogsNotificationsUsage SummaryBulk Operation Logs

Authority that nests

Six tiers down, one ledger up.

Each tier creates exactly one thing: the tier below it. The Admin runs the operation; everyone above provisions, everyone below holds only their slice. Pick a rung to see its reach.

authority ↓
one create per tier, nothing more
money ↑
every payment settles into one ledger
chain-of-command6 tiers · 1 ledger

AAA you can inspect

Authorization isn't a black box. Watch a packet clear every gate.

radiusd -X · one packet's life
; NAS 10.0.0.1 (bras-01) → FreeRADIUSAccess-RequestUser-Name = "demo.user1"Calling-Station-Id = "AA:BB:CC:10:20:31"NAS-Port-Id = "ether5" ; authorize { } — every gate, one passlicense .................. armedaccount .................. foundpackage .................. active · 25M-Fiberexpiry ................... 2026-08-02port binding ............. ether5 allowedmac binding .............. match ; resolve session profilepool ..................... active → active-pool ; FreeRADIUS → NASAccess-AcceptFramed-Pool = "active-pool"Mikrotik-Rate-Limit = "25M/25M"
  1. 01

    The request arrives

    Your NAS forwards the subscriber's PPPoE/hotspot login to FreeRADIUS with the MAC and port it came in on.

  2. 02

    Every gate, one pass

    License, account, package, status, expiry, port binding, MAC binding — checked in a single round trip. No middleware, no sync jobs: the CRM and RADIUS share one source of truth.

  3. 03

    The reply is the profile

    The reply resolves the exact IP pool and rate limit for the customer's current state. Expired customers land in the expiry pool — redirected, not disconnected.

Money that reconciles

Every payment a dealer collects lands in a ledger you can audit.

Wallets fund activations, activations debit down the chain, renewals run on cron and expiries follow your policy — the same tables FreeRADIUS authorizes against. There is no second spreadsheet to disagree with.

Renewals automated
Ledgers per ISP
Wallet ledger · today
  • Franchise F-204 → wallet top-up+$1,200.00
  • Dealer D-1187 → 46 renewals−$598.00
  • Subdealer S-3305 → 12 activations−$228.00
  • Auto-renewal cron → 214 customers−$2,782.00
  • Closing balance — every tier agrees$4,517.13

Dream Radius

From $17 / month

Every licence runs the complete platform — all modules, all six reseller tiers. Capacity is the only variable.

Starter

$17/ month

  • 1,000subscribers
  • 1NAS devices
  • The complete product, every feature

Growth

$39/ month

  • 5,000subscribers
  • 2NAS devices
  • The complete product, every feature
Best choice

Scale

$69/ month

  • 10,000subscribers
  • 3NAS devices
  • The complete product, every feature

Pro

$99/ month

  • 20,000subscribers
  • 5NAS devices
  • The complete product, every feature

Ultra

$149/ month

  • 50,000subscribers
  • 10NAS devices
  • The complete product, every feature

Custom

Let's talk

  • subscribers — sized to you
  • NAS devices — sized to you
  • The complete product, every feature

Included in every Dream Radius tier

  • All 8+ modules — RADIUS core to reporting
  • All 6 reseller tiers, unlimited resellers
  • Unlimited staff accounts with scoped permissions
  • All 3 design themes, light & dark
  • FreeRADIUS, PostgreSQL & Redis stack included
  • Automatic renewals, expiry & dashboard crons
  • Every update while your licence is active

FAQ

Platform questions, answered straight.

Where does Dream Radius run?

On your own server. Each Dream Radius installation is a self-contained Docker stack — panel, API, PostgreSQL, Redis and FreeRADIUS — deployed on hardware or a VPS you control. Your subscriber data never lives on our infrastructure. The same is true of NAT Syslog and Dream Billing App.

Do I need a separate RADIUS server?

No — FreeRADIUS ships inside the stack and reads the CRM's own tables (radcheck, radreply, radacct) through stored functions. There is no sync between billing and AAA because there is nothing to sync.

Which NAS vendors are supported?

Anything that speaks standard RADIUS: MikroTik, Cisco, Huawei, NetElastic and others. Vendor-specific attributes are available by importing the vendor's RADIUS dictionary in the panel.

How does the reseller hierarchy work?

Six tiers — superadmin, ISP, admin, franchise, dealer, subdealer. Each tier registers its own downline, holds a prepaid wallet, sells the packages assigned to it at the wholesale price you set, and sees only its own subtree. Isolation is enforced by the backend on every query.

Can I migrate from my current billing panel?

Yes. Customers and packages import in bulk, keeping usernames, passwords and expiry dates intact, so subscribers reconnect without noticing the switch. Tell us what you're migrating from and we'll walk the path with you.

Is there an audit trail?

Every action — payments, edits, disables, bulk operations, CoA — records who performed it, when and from where. Staff accounts are individual, permission-scoped and MFA-capable, so the trail names people, not a shared login.

How is my installation licensed?

A machine-bound, cryptographically signed license issued by our license server. The installation checks in periodically and keeps a rolling 5-day offline grace window, so a temporary internet outage at your NOC never locks you out.

What happens if my license lapses?

The license server arms your installation continuously. If a license expires, new authorizations pause until it's renewed — your data, configuration and history stay intact throughout.

Who owns the data?

You do, unambiguously. It's your server and your PostgreSQL database, and every report exports to files. If you leave, your data doesn't have to negotiate its way out of someone else's cloud.

Do I have to buy all three products?

No. Dream Radius and NAT Syslog are licensed separately and each runs on its own. Dream Billing App is the exception: it bills from the subscribers Dream Radius manages, so it is only sold bundled with Dream Radius. Start with one product and add another whenever you need it — there is no re-platforming to do later.

Put your whole network under one radius.

A 30-minute walkthrough with your own topology on the table — hierarchy, billing and RADIUS included.