SentraNet Core

Every layer of running an ISP, in one system.

SentraNet is the backbone of seamless ISP operation: subscriber billing, network management and compliance in one platform. Billing, RADIUS/AAA, OLT/ONU, payments, self-care and partner management share one database, so the network and the invoice always agree.

Book a demo Pricing model

Network health

live

Online nowLive

Auth/secLive

Open findingsLive

OLT-04ONUs · optical nominalonline

RADIUS-02secondary · standbysynced

churn_riskaccounts flaggedreview

16OLT vendor drivers

RFC2865 / 2866 / 5176

9EAP methods

4 gatewaysbKash, Nagad, Stripe, PayPal

What you get

What SentraNet Core gives you.

SentraNet replaces the usual ISP patchwork — a billing tool, a separate RADIUS box, a spreadsheet of OLT credentials, a payment gateway nobody fully trusts — with one system that agrees with itself.

Subscriber billing

Full account lifecycle — active, suspended, expired, renewal failed — with automatic invoicing, configurable grace periods per plan, wallet balances, promo codes, and plan upgrades, downgrades and scheduled migrations.

RADIUS / AAA

A purpose-written async RADIUS server covering RFC 2865, 2866 and 5176 in full, with live CoA, nine EAP methods, five auth backends, a failover watchdog and drain-mode handoff. Subscriber changes sync to it in real time.

OLT / ONU management

HTTP drivers for 16 OLT vendors plus CLI over SSH. Auto-discovery of ONUs, auto-binding to subscriber accounts, and per-ONU optical power, temperature and distance monitoring.

Payments

bKash, Nagad, Stripe and PayPal built in, behind one paybill router with an async reconciliation queue, payment links, and email and SMS alerts on consecutive gateway failures.

Self-care portal

Subscribers see invoices, usage history, session and connection details, wallet balance and tickets, pay online, renew, and report payment issues without calling support.

Partner and reseller management

A partner portal for resellers and sub-resellers: customers, wallet top-up, invoices, tickets, bulk import, SMS, reports and plan migrations, with data scoped to each partner.

AI anomaly detection

20 automated detectors scan billing, RADIUS, IP pools, network and system health daily, with findings ranked by severity and an AI chat assistant that works with ISP context. Optional.

Predictive maintenance

Daily ONT failure prediction flags ONUs likely to fail before a truck roll is needed. Churn prediction, revenue forecast and bandwidth trend analysis run on the same data.

Billing and subscribers

The subscriber record drives the network.

An account’s billing state is its network state. Invoices are generated automatically at period end, expired accounts are processed hourly, and a payment received reactivates the account without anyone touching the NAS.

Per-plan pricing, billing interval, speed limits and grace hours
Auto-reactivation of renewal-failed accounts
Customer wallet, promo codes and scheduled plan migration

Account lifecycle

ActiveRADIUS user synced, pool assignedin service

Expired / graceconfigurable grace hourspayment reactivates

Renewal faileddaily auto-reactivation attemptretry

RADIUS, built from scratch

Not bolted onto a database form — a real AAA server.

The RADIUS layer is a purpose-written async server, not a wrapper around FreeRADIUS. Sessions reconcile every minute, and security runs anomaly detection on both authentication and live sessions. Existing FreeRADIUS estates import directly.

9 EAP methods — TLS, PEAP, TTLS, FAST, MD5, LEAP, PWD, SIM/AKA, MS-CHAPv2
5 auth backends — SQL, LDAP, Kerberos, NTLM, PAM
RadSec over DTLS, IPv4 & IPv6 pools, primary/secondary failover

RADIUS estate

Auth servermulti-worker, asynchealthy

Accounting serverpartitioned log writeshealthy

Session anomalyimpossible-roaming detectorclear

Secret rotationrolling shared secretsscheduled

OLT / ONU and predictive maintenance

Find the failing ONU before the customer calls.

SentraNet discovers ONUs across every registered OLT, links them to subscriber accounts, and keeps optical readings fresh. A daily prediction run flags ONTs at risk of failure so field teams act on a list, not a complaint.

16 OLT vendor HTTP drivers plus CLI over SSH
Rx/Tx power, temperature and distance refreshed every 15 minutes
ONU serial and stock reconciliation, reboot log, TR-069 CPE configuration

OLT / ONU

Discoveryauto-detect ONUs on all OLTsrunning

Optical monitoringper-ONU Rx/Tx, temp, distance15 min

ont_failure_riskpredicted failuresreview

Payments

Local payment rails, reconciled automatically.

bKash, Nagad, Stripe and PayPal payments arrive by webhook or paybill API, queue for asynchronous reconciliation, and post to the subscriber account. The same flow activates the account, sends the SMS and refreshes the portal.

One paybill router across gateways, with full inquiry audit trail
Payment links for subscribers and partners
Email and SMS alerts after consecutive gateway failures

Payment flow

bKashwebhook and paybillconnected

Nagadmerchant IPN and paybillconnected

Stripecards, webhooksconnected

PayPalcheckout and IPNconnected

Reconciliation queueasync, every 5 minutesprocessing

Portals

Every role gets its own screen, on the same data.

Subscribers, resellers, internal admins and network engineers each get a purpose-built web app, not one interface with everything hidden behind permissions. All of them read and write the same records.

Self-care portal — subscribers: invoices, usage, wallet, tickets
Partner portal — resellers and sub-resellers, scoped to their own customers
Operation panel — internal admin with bulk actions and reports

Portals

Self-care portalend-customerweb

Partner portalreseller & sub-resellerweb

Operation panelinternal adminweb

Mobile appfindings, AI chat, RADIUSmobile

AI anomaly detection

Twenty detectors that find problems first.

A daily scan runs all 20 detectors across billing, RADIUS, IP pools, payments, scheduler and system health, and emails a report. Findings carry a severity and, where possible, a one-click fix. Churn and renewal-at-risk detection sit alongside.

Billing: balance mismatch, collection gap, plan rate mismatch
Network: RADIUS sync drift, IP pool health, NAS and system health
Cluster infrastructure check every 5 minutes with SMS and email alerts

Findings

radius_sync_healthsync lag, ghost sessionsclear

renewal_at_riskapproaching expiry unpaidreview

plan_radius_driftplan vs RADIUS profilereview

Back Office module

One ledger shared with the Back Office module.

Subscriber invoices, wallet top-ups and payment reconciliation post to the same accounting records as payroll and inventory when you add Back Office. There is no export from a billing system into a separate ERP.

Subscriber revenue and staff costs on one chart of accounts
Regulatory reports generated from the same source data
Add modules later without a second migration

Back Office module

Shared ledger

Subscriber billinginvoices and walletsposted

Payroll runfield & NOC staffposted

Regulatory reportcompliance exportscheduled

Modules

Add modules on the same subscriber record.

Core is what every ISP runs. Each module adds a function ISPs usually buy separately, with no integration project.

Module

Compliance & Logging

NetFlow/IPFIX logging with every session attributed to a subscriber, and BTRC / lawful data-retention reports generated on demand.

Learn more

Module

Hotspot & Vouchers

Generate, sell and activate MikroTik hotspot vouchers from the same billing system that runs your fibre subscribers.

Learn more

Module

Back Office

Accounting, HR, payroll and inventory for the ISP itself — subscriber revenue and staff costs on one chart of accounts.

Learn more

Module

Support Desk

Inbound subscriber support with IVR and queues, plus outbound campaigns for renewals, outages and collections.

Learn more

Module

Field Ops

Track field technicians and vehicles, approve fuel, schedule maintenance and tie every truck roll to a subscriber ticket.

Learn more

How it works

From first conversation to go-live.

An ISP cutover goes wrong when RADIUS moves before anyone has proven the billing matches. We keep the two in daylight, together, before anything switches over.

Discovery

We map your plans, NAS estate, OLT vendors and payment gateways, and agree which realms or NAS groups move first.

Configuration

RADIUS realms, huntgroups, IP pools, OLT drivers and gateway credentials configured against your actual network, not a generic template.

Migration

Subscriber accounts, RADIUS users and secrets are imported and reconciled against your existing invoices before anyone signs off.

Go live

Cutover runs realm by realm or NAS by NAS, with your team supervised on the system through the first full billing cycle.

Specification

The details engineers ask about.

No asterisks. If something depends on your hardware or your regulator, it says so.

Deployment: Self-hosted, typically close to your NAS estate; a hybrid model with cloud portals is also supported.
Data model: One relational database for subscribers, billing, RADIUS and network records, with one ledger shared with the Back Office module.
RADIUS protocol: RFC 2865 (auth), 2866 (accounting), 5176 (CoA/DM), plus TCP and RadSec over DTLS.
EAP methods: 9 — TLS, PEAP, TTLS, FAST, MD5, LEAP, PWD, SIM/AKA, MS-CHAPv2.
Auth backends: 5 — SQL, LDAP, Kerberos, NTLM and PAM.
Network hardware: 16 OLT vendor HTTP drivers plus a CLI driver over SSH; MikroTik RouterOS API for NAS operations.
Payment gateways: bKash, Nagad, Stripe and PayPal, unified behind one paybill router with async reconciliation.
AI & monitoring: 20 automated detectors, churn and ONT-failure prediction, revenue forecast, and an AI chat assistant. Optional.
Portals: Self-care portal, partner portal and operation panel (web apps), a RADIUS dashboard, and a mobile app.
Access control: Role-based, partner-scoped by default with an explicit admin role, and an audit log.
Log retention: Partitioned RADIUS log retention: accounting 90 days, authentication 30 days.

Pricing model

Priced per active subscriber, per month.

SentraNet is priced per active subscriber per month, volume-tiered, so the cost scales with your network rather than with a project plan. Modules are added to the same per-subscriber rate. Implementation and migration are scoped separately.

What is included: SentraNet Core, hosting guidance, updates and support. What is added per module: Compliance & Logging, Hotspot & Vouchers, Back Office, Support Desk, Field Ops. Talk to us for a quote based on your subscriber count and the modules you need.

Talk to us about pricing

Questions

Answers to what usually comes next.

Can SentraNet replace our existing FreeRADIUS setup?

Yes. SentraNet ships a purpose-written RADIUS server implementing RFC 2865, 2866 and 5176 in full, with a dedicated FreeRADIUS importer and CSV bulk import so existing users, NAS clients and secrets migrate rather than get re-typed.

Does it support our OLT/ONU hardware?

SentraNet includes HTTP drivers for 16 OLT vendors plus a CLI driver over SSH for vendors that only expose command-line access. Auto-discovery finds ONUs across every registered OLT, and unlinked ONUs bind to subscriber accounts automatically.

Do we have to run the AI monitoring, or can we turn it off?

It is optional. The 20 detectors, churn and ONT failure prediction, and the AI chat assistant can run on top of an existing deployment or be disabled entirely if you only want billing, RADIUS and network management.

Can SentraNet run the ISP's own accounting and payroll?

Yes, through the Back Office module. Subscriber revenue, payroll and inventory post to the same ledger as billing, so there is no export from a billing system into a separate ERP.

Where does SentraNet run?

Typically self-hosted, since the RADIUS server benefits from sitting close to your NAS estate. A hybrid model is common too: RADIUS and OLT polling on-premises, with the portals and AI layer in the cloud. Fully self-hosted is also supported.

How does migration from our current billing system work?

Discovery maps your plans, NAS estate and OLT vendors, then subscriber accounts, RADIUS users and secrets are imported and reconciled against your existing invoices before cutover. Cutover runs realm by realm or NAS by NAS, not all at once, with the old system left readable until you are satisfied.

Let's talk

Run your ISP on one platform.

We will walk SentraNet through your own network — your plans, your NAS estate, your OLT vendors — so you can judge it on the operation you actually run.

Book a demo See all modules