Home/Products/RADIUS
PRODUCT 05

KYNEX RADIUS

Authentication, Authorization & Accounting
PositioningSecure, Policy-Driven Broadband Subscriber Authentication and Accounting.
Illustrative interface

KYNEX RADIUS provides a centralized authentication and subscriber policy service for compatible broadband environments. Using the RADIUS protocol it authenticates subscribers, returns authorization attributes and processes accounting information from compatible access equipment. Beyond sign-in, it applies quotas, fair-usage and time-based policies, binds subscribers to devices and ports, and changes live sessions in real time. Integrated with KYNEX ISPCRM and a compatible BNG, it can help automate activation, service changes, suspension and reactivation.

Specific protocol, attribute and capacity support is confirmed per project before commitments are made.

Key capabilities

What KYNEX RADIUS does.

01

Subscriber Authentication

PPP-based and IPoE authentication workflows using PAP, CHAP or MS-CHAP, integration with compatible BNGs and validation against configured identity sources.

02

Access Binding & Device Lock

Bind subscribers to a MAC address, DHCP Option 82 circuit ID or VLAN, and limit simultaneous sessions to curb credential sharing.

03

Authorization & Service Profiles

Apply service attributes, associate subscribers with profiles and assign bandwidth and access policies, separately for each tenant or ISP.

04

Quota, FUP & Time-Based Policies

Data quotas, fair-usage throttling, session and idle timeouts, and time-of-day or night-time plans, with top-ups and speed boosts.

05

Live Session Control (CoA)

Change speed, apply plan changes, suspend or disconnect active sessions in real time using RADIUS Change-of-Authorization and Disconnect messages, without waiting for re-login.

06

Accounting & Session Records

Process accounting start, interim and stop records; track session duration and data usage, support troubleshooting and feed KYNEX IPDR and billing.

07

IP Assignment

Static and pool-based IP assignment through RADIUS attributes, with IPv6 prefix attributes where the access equipment supports them.

08

Multi-Vendor NAS Support

Work with compatible BNGs and NAS devices from multiple vendors using their vendor-specific attributes (VSA) and per-device shared secrets.

09

Proxy, Roaming & Failover

Realm-based proxying between servers, primary and secondary servers, and load distribution for continuity.

10

Subscriber Lifecycle Integration

Activation, suspension, reactivation and plan changes coordinated with ISPCRM, including redirection of expired accounts to a payment page, with transaction history.

11

Monitoring, Reports & Alerts

Monitor authentication activity, investigate rejections with reasons, review active sessions, and generate usage reports and alerts, with visibility in KYNEX NMS.

12

Security & Reliability

Controlled administrative access, audit trails, secure secret management, protection against brute-force and flood attempts, RADIUS over TLS where supported, and redundancy by architecture.

Business benefits
  • Centralized subscriber authentication
  • Consistent service policy management
  • Real-time plan changes without subscriber downtime
  • Fewer credential-sharing and abuse cases
  • Accurate usage data for billing and compliance
  • Tighter CRM-to-network integration
Target customers
  • Broadband ISPs
  • PPPoE-based operators
  • FTTH service providers
  • Multi-site network operators
  • Managed broadband providers
  • Operators with multi-vendor BNG or NAS networks
Technology scope
  • Capabilities depend on the customer's infrastructure, service model and supported integrations.
  • CoA, RADIUS over TLS, IPv6 attributes and vendor-specific attributes depend on the access equipment and deployment.
Product
promise

Authenticate subscribers. Control sessions live. Simplify broadband access management.

Works with

KYNEX RADIUS is designed to integrate with other KYNEX products through supported interfaces.

FAQ

Questions about KYNEX RADIUS

What is KYNEX RADIUS?

KYNEX RADIUS provides a centralized authentication and subscriber policy service for compatible broadband environments. Using the RADIUS protocol it authenticates subscribers, returns authorization attributes and processes accounting information from compatible access equipment.

Who is RADIUS designed for?

RADIUS is designed for Broadband ISPs; pppoe-based operators; ftth service providers; multi-site network operators; managed broadband providers; operators with multi-vendor bng or nas networks.

What are the key features of KYNEX RADIUS?

PPPoE & IPoE authentication, PAP / CHAP / MS-CHAP support, Authorization & access control, Accounting & session records, Service profile and bandwidth policies, CoA & live session disconnect, Data quota & FUP policies, Time-of-day & scheduled plans, MAC & Option 82 binding, Simultaneous-use control, Static & pooled IP assignment, Multi-vendor NAS support (VSA), Proxy RADIUS & failover, Subscriber suspension / reactivation, Multi-tenant ISP support.

Does RADIUS work with other KYNEX products?

RADIUS can be adopted on its own and is designed to integrate with KYNEX BNG, KYNEX ISPCRM, KYNEX IPDR through supported interfaces. Actual integration depends on your deployment.

How do I request a RADIUS demo?

Use the contact page and choose the product, or email info@kynexindia.in. The team will arrange a walkthrough.

Connecting Networks. Automating Operations. Enabling Growth.

Ready to see RADIUS in action? Request a walkthrough.

Request a demo →