ISP network operators face challenges ensuring that only authorized customer devices ("subscribers") are being admitted to the network via a central source of truth. The logical source of truth would be a billing and network management system ("NMS"), such as UISP. While UISP does have support for 3rd party devices within its NMS, feature parity support for 3rd party devices compared to native UBNT CPE devices (those that exist in UISP via a "UISP Key") does not exist. Further, network authorization is only on "best effort" based on "good intentions" of administrators that ensure all devices on your network are UBNT CPE devices or cumbersome to administer "3rd party devices". For example, if an unauthorized or untracked device happens to gain a DHCP lease from a broadband network gateway ("BNG", ISP router) there are no checks and balances to ensure that the device is associated with an Internet service on an account within UISP. The device is simply granted unaccounted for, unbilled, unrestricted, Internet access once IP addressing is assigned.
Archous Networks recognizes the need to have subscribers tracked and authorized via a central source of truth. We believe UISP, with proper plugin development combined with external automation and orchestration, can be adapted to support central subscriber authorization. Fundamentally our plugin enables UISP operators to have a single pane of glass for adding subscriber MAC address or PPPoE account information directly to UISP services. With our solution there's no more need to swivel-chair between the CRM module and NMS module to add 3rd party devices or UISP Keys. There's no need to ensure that the subscriber's CPE equipment is UBNT and attached to UISP with a UISP Key. An operator can simply select a device that exists already in the NMS module, type in the MAC address of an authorized device, or type in subscriber PPPoE credentials to authorize a device. The premise is that all features are supported on native UISP and 3rd party devices -- regardless of the type, make, and model. If it has a MAC address it's supported.
From a MAC address perspective some operators prefer to use the MAC address of an upstream bridged CPE device instead of subscriber devices which can change over time. This is where DHCP option-82 support comes in handy to reduce administrative overhead of having to track customer equipment MAC addresses if that is undesirable.
We also support provisioning static IP address assignment (DHCP reservation or Framed-IP) as well as route assignment (static route or Framed-Route) via the same CRM pane of glass. The subscriber's service QoS (upload and download speeds) are also automatically enforced on the IP address and route assignments via rate limiters on the BNG.
For all unknown devices that exist on the network but are not attached to a service in CRM, we enforce subscriber portal redirect, restricted IP lists, and default QoS rate limits.
All features are supported on native UISP and 3rd party devices -- regardless of the type, make, and model. If it has a MAC address it's supported.
Pricing Sheet | User Guide | Live Demo | Sign Up Now!
Supported BNGs (ISP network routers):
MikroTik RouterOS v7
Supported features:
Subscriber MAC address based authentication
Assignment based on actual device MAC
Subscriber IP assignment and address management via UISP CRM
Assign Static IPs, Static Routes from CRM to subscribers
Enforce all device Internet access to be controlled by an active UISP CRM service
CRM becomes source of truth for network authorization
Remove any chance of rogue or untracked customers gaining unauthorized access through your network
Suspension redirect support for any device not on an active UISP CRM service
Enforce all device Internet upload and download speed to be controlled by an active UISP CRM service
Set a default speed for unauthorized devices
All features are supported on native UISP and 3rd party devices -- regardless of the type, make, and model. If it has a MAC address it's supported.
This is a placeholder for future feature and BNG support. We will release more information as it becomes available as far as timeline and roadmap.
If you are interested in UISP IP Provisioner but don't have a supported BNG, we may still be able to help with a custom solution. Please email support@archous.tech
Additional Supported BNGs (ISP network routers):
Ubiquiti EdgeOS
MikroTik RouterOS v7
NetElastic
Cisco IOS-XR
Cisco IOS
Juniper JunOS
Additional Supported features:
PPPoE authentication
RADIUS Cloud Services
Subscriber MAC address based authentication
Assignment based on actual device MAC and/or DHCP option 82