Managed FreeRADIUS for ISPs — without the sysadmin tax
BillFi runs a hardened, multi-tenant FreeRADIUS cluster under the hood. You get every attribute, every EAP method and every accounting hook — with an admin UI, mobile-money billing and 24/7 uptime you don't have to maintain.
Battle-tested FreeRADIUS core with a modern CRM on top.
What you're probably fighting today
SQL schema, radiusd.conf, dictionary updates, TLS certs, backups. BillFi runs it as a service — you consume it like a REST API.
One wrong Framed-IP-Address broke your whole tower last time. BillFi validates every reply attribute before it hits the wire.
FreeRADIUS ships auth; not invoices, not mobile money, not a portal. BillFi glues AAA to the CRM you actually need.
Everything a FreeRADIUS / Cloud AAA operator needs
Multi-region cluster, encrypted secrets, isolated tenants — the same FreeRADIUS you know, without the ops burden.
Any RADIUS dictionary attribute — MikroTik, Cisco, Huawei, Chillispot, WISPr — editable per plan, validated per NAS.
Interim-Update every 5 min, Start/Stop hooks, session correlation across NAS restarts, deduplication on retries.
Certificate-based enterprise auth for staff Wi-Fi alongside PPPoE for subscribers — one AAA plane.
Live-tail Access-Request / Accept / Reject with full attribute dumps — better than tcpdump, no shell required.
Framed-IP, Framed-IPv6-Prefix, Delegated-IPv6-Prefix — pool assignment, reservations and lease audit built in.
Live in a weekend, not a quarter
IP, shared secret, vendor. BillFi validates the shared secret with a live Access-Request round-trip.
Per-plan attribute sets with per-NAS overrides. Preview the exact packet before you save.
Change your NAS's RADIUS server to our anycast endpoint. TLS-wrapped RadSec optional.
Live attribute inspector, session history and accounting-driven invoicing — all in one CRM.
Plays nicely with your gear
Bring the vendors you already run. BillFi drops into the middle of your stack — no rip-and-replace.
Answers, before you ask
Is this real FreeRADIUS or a rewrite?
Real FreeRADIUS 3.2, patched and hardened. You can request an rlm_perl or unlang policy and we'll load it into your tenant.
Can I bring my own dictionary?
Yes. Upload a vendor dictionary and it's available in the attribute editor within minutes.
What about RadSec / TLS?
RadSec is available on request for tenants that need encrypted RADIUS over the public internet — no more UDP shared secrets in transit.
Do you support EAP for enterprise Wi-Fi?
Yes: EAP-TLS with your CA, PEAP-MSCHAPv2 and EAP-TTLS. Great for staff SSIDs alongside subscriber PPPoE on the same tenant.
Network management,
automated.
Join hundreds of ISPs across Africa, Asia, and Europe automating their billing, provisioning, and support with BillFi.