🇵🇰 Proudly made in Pakistan

ISP Boost Cloud - the all-in-one ISP billing & RADIUS platform, fully hosted

Supercharge your ISP.

Run your entire Internet service from one panel - customers, packages, billing, resellers, NAS, and reports. We run the server, updates and backups; you just point your MikroTik at us. Nothing to install, no Linux skills required.

FreeRADIUS 3.2MikroTik / any NAS Prepaid & postpaidReseller / manager tree Cards & vouchersManaged & backed up Billed monthly

Introduction

ISP Boost Cloud is a complete management system for Internet Service Providers and network operators, hosted and managed for you. It bundles a RADIUS server, a billing engine, a customer/reseller hierarchy, and a modern web control panel into a single hosted platform.

It's built for the real world of ISPs: prepaid & postpaid plans, reseller balances, activation invoices, vouchers/cards, FUP & quotas, MAC binding, session and authentication logs, and flexible money handling. Sign up, point your MikroTik at your Cloud RADIUS endpoint, and you're live the same day.

Zero server managementNo Linux, no FreeRADIUS config, no patching. We handle the infrastructure.
Built for resellersGive each reseller their own scoped panel, wallet balance and pricing - they activate their own users from their balance.
Live in minutesSign up and your panel + RADIUS endpoint are ready immediately. Billed monthly, cancel anytime.

Key features

AreaWhat you get
CustomersUnlimited users, profiles/packages, expiry & FUP, quotas, MAC lock, bulk actions, KYC documents
BillingPrepaid & postpaid, activation/renewal invoices, receipts, credit users, double-entry ledger, PKR currency
ResellersMulti-level manager tree, per-reseller wallet, cascading pricing, balance-gated activation, scoped reports
RADIUSFreeRADIUS 3.2, MikroTik & standard NAS, live sessions, auth log, disconnect (CoA)
CardsPrepaid card / voucher batches, redeem & verify
ReportsActivations, sessions, journals, profits, receipts, auth log - all filterable
OperationsTickets, inventory, HR, assets, custom form fields, branded reseller domains
PlatformNo setup wizard needed, monthly billing, automatic updates & backups, role-based access control

1. Sign up

No server, no installation. Go to ispboost.com/pricing and choose a Cloud plan (the Free Trial needs no card). Your panel and a dedicated RADIUS endpoint are provisioned immediately - there is nothing to configure on your side beyond your own account details.

Tip: Prefer to run it yourself instead? See the Self-Hosted documentation for the one-command install.

2. First-time setup

  1. Company details - your company name, phone, email, address and timezone (used on invoices, the portal and notifications).
  2. Set your admin password - the credentials for your account are shown once at signup; change the password on first login.
  3. You're live - your Cloud panel and RADIUS endpoint are ready to use immediately, no wizard to complete.

3. Plans & billing

Cloud plans set a maximum number of users - this counts every subscriber record that currently exists (not concurrent/active-at-once sessions), so an expired or disabled subscriber still counts until it's deleted:

PlanUsersNAS/routersPrice
Cloud Free Trial251$0, 14-day trial
Cloud Starter5005$29/mo
Cloud Professional5,00025$79/mo
Cloud EnterpriseUnlimitedUnlimited$199/mo

RADIUS, billing, resellers and reports are on every tier including the free trial. Inventory, HR, Assets and the Hotspot captive portal unlock from Cloud Professional up. Billed monthly, cancel anytime - no yearly commitment. See full pricing for the latest rates.

4. Quick start

  1. Log in with the account credentials from signup.
  2. Create a Profile (package) - Profiles → New. Set speed, price, validity and FUP/quota.
  3. Add your NAS - NAS → New. Enter your router's IP and a shared secret (see the next section).
  4. Create a user - Users → New. Pick the profile, set the username/password, and activate.
  5. Connect the customer - their router/PPPoE/Hotspot now authenticates against your Cloud RADIUS endpoint.

5. MikroTik: complete setup from scratch (Device, NAS, PPPoE, Hotspot)

This section takes a MikroTik router from a blank device to fully billing customers through your Cloud RADIUS endpoint, both PPPoE and Hotspot. Every network-facing step is given as Winbox clicks and the equivalent CLI/Terminal command - use whichever you're more comfortable with, they do the same thing. Skip 5.1 if your router already has working internet/LAN. Cloud has no server for you to install - everything below is on the router side and in your ISP Boost panel.

5.1 Device setup (basic router config)

A fresh/reset RouterOS device needs a WAN link, a LAN bridge, and NAT before it's usable at all. Skip this if it's already online.

WinboxCLI (Terminal)
System → Identity - name the router (e.g. ISP-Main)./system identity set name=ISP-Main
IP → DHCP Client → + → Interface = your WAN port (e.g. ether1) → OK. (Skip if your WAN uses a static IP or PPPoE-out to an upstream ISP - configure that instead.)/ip dhcp-client add interface=ether1 disabled=no
Bridge → + → Name bridge1 → OK. Then Bridge → Ports → + for each LAN port (e.g. ether2, ether3) → Bridge = bridge1./interface bridge add name=bridge1
/interface bridge port add bridge=bridge1 interface=ether2
/interface bridge port add bridge=bridge1 interface=ether3
IP → Addresses → + → Address 192.168.88.1/24, Interface bridge1 → OK./ip address add address=192.168.88.1/24 interface=bridge1
IP → Firewall → NAT → + → Chain srcnat, Out. Interface ether1 (your WAN) → Action tab → masquerade → OK./ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade
Tip: Don't run the LAN as plain open DHCP if you're going to sell service on it - PPPoE or Hotspot (below) is what actually gates access by subscriber. A LAN DHCP server is only for local/admin/management devices, not customers.

5.2 NAS configuration (in ISP Boost)

  1. Go to NAS → New NAS and fill in: Shortname (a short identifier, e.g. mt-main), NAS name / IP (your MikroTik's public IP), Secret (create a strong shared secret - you'll need the exact same value on the MikroTik), Type = mikrotik.
  2. Save, then go to NAS → toolbar → Reload FreeRADIUS.
Do not skip this. FreeRADIUS only loads its NAS list at startup, so a newly added NAS is invisible to it until reloaded - every request from it is silently dropped, no reply at all. On the MikroTik this shows up as the login getting stuck on "already authorizing, retry later" (Hotspot) or a PPPoE connection that never authenticates, which looks like a bug but is really just a missing reload. Click Reload FreeRADIUS and wait a few seconds before testing. Required again any time you add a NAS or change its IP/secret - not for new profiles or users.

5.3 RADIUS client on the MikroTik

This is the one-time link between the router and your Cloud RADIUS endpoint (shown on your NAS page) - both PPPoE and Hotspot reuse it.

WinboxCLI (Terminal)
Left menu RADIUS → + (Add New) → Services tab: tick ppp and hotspot. Address = your Cloud RADIUS endpoint. Secret = the exact shared secret from 5.2. Authentication Port 1812, Accounting Port 1813 → OK./radius add service=ppp,hotspot address=<YOUR-CLOUD-RADIUS-ENDPOINT> secret=<your-shared-secret> authentication-port=1812 accounting-port=1813
Back in the RADIUS window, toolbar → Incoming button (widen the window or use the » overflow if it's hidden) → tick Accept → Port 3799 → OK. This enables CoA (live disconnect/update from the panel)./radius incoming set accept=yes port=3799
Tip: Watch for a trailing space when pasting the secret into the Winbox field - it's the single most common reason two identical-looking secrets don't actually match.

5.4 PPPoE setup

On the MikroTik:

WinboxCLI (Terminal)
IP → Pool → + → Name ppp-pool, Addresses 10.10.0.2-10.10.0.254 → OK./ip pool add name=ppp-pool ranges=10.10.0.2-10.10.0.254
PPP → Profiles tab → + → Name isp-default, Local Address 10.10.0.1, Remote Address ppp-pool, DNS Server 8.8.8.8 → OK. Leave Rate Limit blank - RADIUS pushes it per-subscriber from the assigned ISP Boost profile./ppp profile add name=isp-default local-address=10.10.0.1 remote-address=ppp-pool dns-server=8.8.8.8
PPP → PPPoE Servers tab → + → Service Name isp-pppoe, Interface = your customer-facing interface (e.g. bridge1, or a dedicated VLAN), Default Profile isp-default, Authentication chap,mschap2 → OK./interface pppoe-server server add service-name=isp-pppoe interface=bridge1 default-profile=isp-default authentication=chap,mschap2 disabled=no
PPP window → toolbar AAA button → tick Use RADIUS, tick Accounting → OK./ppp aaa set use-radius=yes accounting=yes

In ISP Boost:

  1. Profiles → New profile: Type = Prepaid (or Postpaid), set rate limit (e.g. 6M/6M), validity period and price. Syncs to FreeRADIUS automatically.
  2. Users → New user: set username, password, assign the profile. These become the subscriber's PPPoE login.

Give the customer their username/password to enter in their own router's PPPoE client (or test from another MikroTik: /interface pppoe-client add interface=ether1 user=<username> password=<password> disabled=no).

5.5 Hotspot setup

Plan gate: the Hotspot module (and Inventory/HR/Assets) is available on Cloud Professional and above. Free Trial/Starter accounts get a 403 "upgrade your plan" if they try to use it - see Plans & billing.

On the MikroTik - create the Hotspot service (skip if it already exists):

WinboxCLI (Terminal)
IP → Hotspot → click hotspot Setup (the wizard button, not a tab) → Hotspot Interface: your wifi/LAN interface (e.g. bridge1) → accept the pre-filled Local Address/Pool → Certificate none → SMTP 0.0.0.0 (skip) → DNS 8.8.8.8 → DNS Name optional → finish (the built-in local hotspot user it offers can be ignored, real users go through RADIUS/vouchers)./ip hotspot setup (interactive wizard - same prompts as the GUI, answer them in order)
IP → Hotspot → Server Profiles → open the profile the wizard created → RADIUS tab → tick Use RADIUS → OK./ip hotspot profile set [find] use-radius=yes

Walled Garden + login-page redirect - needed because ISP Boost hosts the actual voucher-login page, not the router itself:

WinboxCLI (Terminal)
IP → Hotspot → Walled Garden → + → Dst. Host your-cloud-domain.com → Action allow → OK. Repeat with *.your-cloud-domain.com./ip hotspot walled-garden add dst-host=your-cloud-domain.com action=allow
/ip hotspot walled-garden add dst-host=*.your-cloud-domain.com action=allow

Then point the router's login page at your ISP Boost portal: in Winbox, Files list → open hotspot/login.html (Edit, or drag it out, edit, drag back) and replace its contents with:

<html><head><meta http-equiv="refresh" content="0;url=https://your-cloud-domain.com/hotspot?link-login-only=$(link-login-only)&mac=$(mac)&ip=$(ip)"></head><body></body></html>

RouterOS substitutes the $(link-login-only)/$(mac)/$(ip) placeholders itself when it serves this file, so the redirect carries the router's real login context to the portal - after a customer enters a valid voucher there, the portal auto-submits the credentials straight back to that login URL.

In ISP Boost - activate voucher selling:

  1. Profiles → New profile: set Type = Hotspot, rate limit, validity period and price.
  2. Cards → generate vouchers against that Hotspot profile.
Current scope: the public Hotspot portal is voucher-redemption only - there's no self-signup or a separate branding/session-limit settings page yet. Branding is just your company name from Settings → Organization.

5.6 Verify everything end to end

  1. PPPoE: connect a test device/router with the username/password from 5.4. It should get an IP from the pool within seconds.
  2. Hotspot: connect a test device to the wifi, it should redirect to the ISP Boost voucher page; enter a voucher from 5.5.
  3. Confirm it end to end: in ISP Boost, open that user → Sessions tab. An active session should appear within ~30 seconds - that confirms full authentication and accounting, not just a page redirect or PPP negotiation.

If login doesn't work, check in this order: (1) did you click Reload FreeRADIUS after adding the NAS (5.2)? (2) does the shared secret match exactly on both sides, no extra spaces (5.3)? (3) is UDP 1812/1813 reachable from your MikroTik to your Cloud RADIUS endpoint (check your own firewall/NAT)? (4) open NAS → your NAS → Console for a live log of what FreeRADIUS sees from that specific router. (5) Hotspot only: is the Walled Garden entry in place, and does hotspot/login.html actually contain the redirect?

6. Resellers & roles

ISP Boost has a built-in multi-level reseller (manager) system. Each reseller logs into the same panel but sees only their own customers, with their own wallet balance and pricing.

Tip: Keep "Users · index all" off for reseller roles so each reseller stays scoped to their own subtree. It's clearly flagged in the role editor.

7. Updates

Updates, patches and backups are entirely our responsibility on Cloud - there is nothing to trigger, schedule or verify on your side. New features simply appear in your panel when they're released.

8. Troubleshooting

SymptomWhat to check
Can't reach the panelCheck your internet connection and try again in a few minutes; if it persists, contact support.
"Already authorizing, retry later" on MikroTikYou added or changed a NAS but didn't click NAS → Reload FreeRADIUS - see section 5.2.
Users can't connectCheck the NAS IP & shared secret match, and the user is active & not expired. See Reports → Auth log.
Feature returns "upgrade your plan"Inventory, HR, Assets and Hotspot are Cloud Professional+ only - see section 3.
Voucher rejected on the hotspot portalConfirm the voucher was generated under a Hotspot-type profile and hasn't already been redeemed - see section 5.5.
Hotspot login page never appears / router doesn't redirectThe MikroTik Hotspot server itself isn't set up yet - run the Hotspot Setup wizard first, see section 5.5.
Reseller can't activateTop up their wallet balance - activation is charged to the reseller.

Cancelling

Cloud has no yearly lock-in. To cancel or downgrade your plan, contact support@ispboost.com - there's no destructive uninstall step on your side since there's no server of yours to clean up. Ask about exporting your data first if you plan to migrate to a self-hosted license.

FAQ

Does my plan's user limit count concurrent/active users, or total subscribers ever created?

Total subscribers, not concurrent/active-at-once sessions. A subscriber counts toward your plan's limit from the moment it's created (including when a voucher gets redeemed) and keeps counting even after it expires or is disabled, until the record is deleted.

Can I create unlimited vouchers/users throughout the year, as long as active users don't exceed my plan limit at once?

No - the same total-record counting applies as above. If your voucher turnover is high, delete old/expired subscriber records periodically, or talk to us about the right tier for your volume.

Exactly which address and secret do I use when adding a NAS?

NAS IP = your MikroTik's IP address. Secret = any strong string you choose - it must match exactly on both the NAS entry in ISP Boost and the /radius add command on the MikroTik, pointed at your Cloud RADIUS endpoint. See section 5.2/5.3 above.

Do I need to reload FreeRADIUS every time I make a change?

No - only after adding a new NAS, or changing an existing NAS's IP or secret. Creating profiles, users, or vouchers never requires a reload; those take effect immediately.

How do I confirm RADIUS authentication is actually working, not just that the hotspot page redirected?

Open the subscriber in ISP Boost and check the Sessions tab. A real successful authentication creates an active session there within about 30 seconds - that confirms the full round trip, not just that the captive portal page loaded.

Support & contact

ISP Boost is built and supported by ISP Boost in Pakistan. We're here to help you get set up and grow.

Support phone+92 21 38381016 Emailsupport@ispboost.com Websitewww.ispboost.com