Updated
PPPoE Plans
Create PPPoE subscriber plans with RADIUS-enforced speed limits, automated billing, and disconnect/reconnect on expiry.
How PPPoE billing works
PPPoE (Point-to-Point Protocol over Ethernet) is the standard way ISPs deliver dedicated subscriber connections with per-user authentication and speed enforcement. DataRadius automates the entire lifecycle: subscriber sign-up, RADIUS authentication, speed enforcement, payment collection, and disconnect/reconnect on plan expiry.
The flow:
- A subscriber's router dials a PPPoE session on your MikroTik access concentrator.
- The router forwards the authentication request to the DataRadius RADIUS server over the encrypted tunnel.
- RADIUS checks the subscriber's credentials and plan status. If the plan is active, it returns an Access-Accept with rate-limit attributes. If expired, Access-Reject.
- The MikroTik router establishes the PPPoE session with the speed limits from RADIUS.
- When the plan expires, DataRadius sends a Disconnect Message (DM) to terminate the session.
- When the subscriber pays, DataRadius either sends a CoA to restore speed or allows the next authentication to succeed.
Creating a PPPoE plan
Navigate to PPPoE → Plans → New Plan. Each plan defines:
| Field | Description |
|---|---|
| Plan name | Visible to operators and in subscriber communications (e.g. "Home 10 Mbps"). |
| Download speed | Maximum download rate in Mbps. Sent as a RADIUS attribute to the router. |
| Upload speed | Maximum upload rate in Mbps. |
| Monthly price | Amount in your local currency. DataRadius collects via your configured payment provider and tracks billing status. |
| FUP threshold | Optional fair-use policy. After the subscriber transfers this many GB, speed is reduced to the FUP rate until the cycle resets. |
| FUP speed | Reduced speed applied after the FUP threshold is exceeded. |
| Billing cycle | Monthly, quarterly, or annual. Determines when the plan renews and when the FUP counter resets. |
Example plans:
| Plan | Download | Upload |
|---|---|---|
| Home 5 Mbps | 5 Mbps | 1 Mbps |
| Home 10 Mbps | 10 Mbps | 2 Mbps |
| Business 20 Mbps | 20 Mbps | 5 Mbps |
| Business 50 Mbps | 50 Mbps | 10 Mbps |
Set prices in your local currency when you create each plan.
Adding subscribers
Go to PPPoE → Subscribers → Add Subscriber. Enter:
- Name — the subscriber's name for your records.
- Phone number — their mobile number, used for billing and notifications.
- PPPoE username — the credential used for PPPoE authentication. DataRadius generates one by default, or you can set a custom one.
- Plan — select from your configured plans.
DataRadius generates a PPPoE password and provisions the subscriber in RADIUS. You give the subscriber their username and password — they enter these in their CPE router's PPPoE client settings.
RADIUS attributes
When a subscriber authenticates, DataRadius returns these RADIUS attributes to the router:
- Mikrotik-Rate-Limit — the speed limit from the plan (e.g.
10M/2Mfor 10 Mbps down, 2 Mbps up). - Session-Timeout — for time-limited plans, how long the session is valid.
- Framed-IP-Address — if the subscriber has a static IP assignment.
- Acct-Interim-Interval — how often the router sends accounting updates (default: 300 seconds).
The router enforces these attributes at the PPPoE session level. DataRadius does not touch the subscriber's traffic — the router does all enforcement.
Automated disconnect and reconnect
When a subscriber's plan expires (payment overdue beyond the grace period):
- DataRadius sends a RADIUS Disconnect Message (DM) to the router.
- The router terminates the PPPoE session. The subscriber loses internet access.
- If the subscriber attempts to reconnect, RADIUS returns Access-Reject until the plan is renewed.
When the subscriber pays:
- DataRadius receives the payment callback and updates the plan status to active.
- If the subscriber is already trying to connect, the next authentication succeeds with full-speed attributes.
- If the subscriber has an active but throttled session (grace period), DataRadius sends a Change of Authorization (CoA) to restore the plan speed immediately, without dropping the session.
The subscriber does not need to call you, and you do not need to SSH into the router. The entire flow is automatic.
Speed changes
When you change a subscriber's plan (upgrade, downgrade, or custom speed adjustment), DataRadius sends a CoA to the router. The router updates the rate limit on the active PPPoE session without disconnecting. The subscriber sees the new speed within seconds, with no interruption.
This also works for FUP enforcement. When a subscriber hits their FUP threshold, DataRadius sends a CoA to reduce their speed to the FUP rate. When the billing cycle resets, a CoA restores the full speed.
Monitoring subscribers
The PPPoE → Subscribers page shows:
- Status — online/offline with session duration.
- Current speed — the rate limit active on the session.
- Data usage — bytes transferred in the current billing cycle.
- Plan — assigned plan name and billing status (active, grace, expired).
- Last payment — date and receipt number.
Click a subscriber to see their full history: every session (start/end times, data transferred, assigned IP), every payment, and every plan change.
Bulk operations
For ISPs with hundreds of subscribers, DataRadius supports bulk operations:
- Bulk import — upload a CSV with subscriber names, phone numbers, usernames, and plan assignments. DataRadius provisions all of them in RADIUS and sends credentials via SMS.
- Bulk plan change — select multiple subscribers and move them to a different plan. CoA updates are sent to all affected routers.
- Bulk export — download subscriber data as CSV for reporting or migration.