UBNT AirOS wireless Radius authentication

Ubiquiti access points have the ability to authenticate radius via Radius server. This means the admin doesn’t have to maintain local passwords for wireless authentication, each CPE/radio can have its own account in the Splynx ISP Framework and our Radius server will authenticate UBNT CPEs.

Usually ISP already has a PPPoE or similar authentication mechanism, which is why wireless Radius authentication is added in Splynx to existing customers as one new (empty) service.

In the first step we define a Plan in Splynx with 0 price and 0 in all other fields.

2016-07-07 04.09.07 pm

Then, we should add a wireless service to the customer and enter his login and password.


It is also important to add AP to splynx.


In the last step we should enable Wireless Radius authentication EAP on the UBNT router and setup a Radius server IP address and secret.


Now we can connect a UBNT radio CPE to a UBNT Access Point


Billing, invoicing and finances in Splynx

Business is always about profit. ISP needs to control customer payments, generate invoices, process and pair payments, and manage finance flow.












Splynx has a powerful billing engine. It consists of 4 main parts:

1. Transactions
2. Invoices
3. Payments
4. Proforma Invoices

1. Transactions
The whole billing process inside Splynx is based on transactions.
Transactions are the key point in billing, and they are always added when there is a change in the customer’s flow or balance:

a. Each invoice period Splynx charges customers automatically. The admininstrator can set up the invoice date as the 1st day of the month, and then customer will be charged for the calendar month.
Splynx has the ability to charge each customer on a different date. For example, one customer is charged on the 15th day of the month, and another customer is charged on the 20th. This action creates an “+ Debit” transaction.

b. When a customer pays for services, a transaction is created. He can pay via bank transfer, cash or online payment gateway. Splynx will always pair the payment with the customer’s account and create one payment transaction. A “- Credit” transaction is then created.

c. When administrator adds or removes money to/from the customer’s balance.

d. When correction is needed, it’s also achieved with a transaction.

Thanks to the transaction system, there is always a clear history, as well as a way to track changes in the customer’s   profile.


2. Invoices

Splynx provides the ability to work with or without invoices.
Without issuing invoices, Splynx just receives payments and charges customers each invoice period without creating an official document.
When invoicing is required, Splynx is able to generate invoices automatically, or the administrator can issue invoices manually. Invoices can be created in bunch or separately. Invoices in PDF format are fully customizable. All documents generated by Splynx can be exported to different formats to end users for printing or sending.
Example of the custom invoice for our customer:



3. Payments

Splynx processes payments. When customer pays cash in your company office, the Cash Desk module is used to enter payments into the system. The Cash Desk operator’s access is limited: he can only accept, enter payments and view customers’ details. The administrator can add cash payments into the system as well.

ISPs usually have different payment methods; we support bank transactions or generation of SEPA payment orders. Bank payment transactions are automatically processed by Splynx handlers – small modules created for each bank file format.

An example of automatic bank processing is shown in the picture below:


SEPA payment orders are files generated by Splynx and sent to the bank, transferring money from customer accounts to the company account. We support different SEPA formats and we can support formats of any European country.

Payment gateways. We are continuously adding online payment gateways such as PayPal, etc. Customers can pay your company for services via a login portal or directly via online payment gateway website. When Splynx receives a payment, one transaction is added.

4. Proforma invoices
These are non-tax documents created by Splynx. Sometimes companies don’t issue invoices immediately, but send customers a payment request or proforma invoice.
When proforma invoices are created, the customer’s balance hasn’t been changed. The main reason for this billing approach is to prevent the payment of VAT tax for non-paying customers.
If the customer pays the amount specified in the request PDF, the company can issue a tax invoice.
An example of this document is shown in the picture below:


The Splynx billing engine is fully customizable and scalable with the ability to serve thousands of transactions every month. Our customers use it in different parts of the world and we are able to set up the billing according local requirements.

Splynx is also very powerful RADIUS server, please check the other article here.

There are four video tutorials below, showing how each part of the billing engine works.






Should you have any questions regarding the billing engine or further information is needed, please contact us or schedule a call with our engineer.

Smart bandwidth management – FUP module

Many ISPs use a Fair User Policy (FUP). This means if a customer downloads or uploads more than a certain amount of data, his speed is reduced. We’ve moved this idea on to a different level and made it as configurable as it can be. Splynx is also very powerful RADIUS server, please check this out here.

In the Splynx ISP Framework we have smart bandwidth management. You can define customer speed based on the amount of traffic consumed per month, per week, or even per day. You can also set up maximum online time in hours per customer.

Do you want to give your users double speed at night, dounlimited traffic on the weekends, or set up a speed limit for downloaders who exceed the daily download limit? Do it with Splynx right now!

PlansFUP settings are located in Plan under the arrow button

Let’s create an example. We have a 5 Mbps download and upload plan. I’ve decided there will be unlimited traffic for customers on weekends and they will get 7 Mbps on Saturdays and Sundays. The first rules have been created below. The first rule is “Unlimited traffic on weekends”:

Don't count weekends

Increased speed from 5 Mbps to 40% more on Saturdays and Sundays:

7Mb on weekends

Then we can check what rule will be applied on Saturday:

2016-04-01 08.38.44 pm


The next step is to set up a rule for downloaders with transfers of 10GB per day – I will reduce their speed to 2 Mbps after they reach 10 GB in one day.


I’ll set up a total Monthly usage limit of 100 GB; after  this limit is reached, we will give the user 1 Mbps. When the user reaches 110 GB, we will block him and charge additional data.


As you can see in the last picture, we have created a full comprehensive policy for bandwidth management for a 5 Mbps plan. You can use our FUP builder and create your own rules! Speed limitation is done via Radius using CoA attributes on any supporting equipment or via Mikrotik API on RouterOS.

Two-factor authentication in Splynx

Splynx always cares about security. Information has to be stored and processed in a secure way. Passwords inside our database are encrypted, and all codes are encrypted as well. But what will happen if one of your administrators has a poor password and the wrong people gain access to your Splynx system?

To prevent this we‘ve introduced the support of two-factor authentication of administrator login to the Splynx ISP Framework. What does this mean? It means that after entering your username and password you have to enter a temporary code created by a special application in your mobile phone. This app can be either Google Authenticator, Authy or 1Password. This is the most secure login approach in today’s web world.

At the first step, we create a new admin account that is given to one of our network administrators.


Then, when we are in Splynx under the “newadmin” account, we enable 2-factor authentication.


Open your App in your mobile phone (here it’s a Google Authenticator) and scan the QR code


An instance of authentication for Splynx was created in your app, now use it :


Next time if “newadmin” tries to log in to the Splynx system, he will always be asked for one-time code.




Splynx Hotspot prepaid vouchers management

In Splynx core we have a powerful RADIUS server which provides different types of services to the end users. For more information about it, please follow this link. One of our popular services is Hotspot access for hotels, conference halls etc. Soon we will create a module for Splynx that can add PayPal, cards and online registration features. At the moment, you can use Splynx for providing hotspot access to regular customers or generating prepaid vouchers for one time access. Pictures with examples of how to generate customized prepaid vouchers are shown below.


Here you can define the voucher prices, download and upload speed, and max. traffic. Once vouchers are generated you can edit and customize each one, and set up the contact details of customers using the cards.


Each voucher has its own statistics, charge of usage and detailed information:


I recommend that you spend 5 minutes watching our manual to understand what our Hotspot module can bring you and how you can use it .