Technical Documentation
Security & Architecture
Access control, MFA, audit logs and data protection.
Access control, MFA, audit logs and data protection.
01Access control
- Multiple administrators with role-based permissions.
- Multi-factor authentication for admin accounts.
- Session management and account security controls.
02Data protection
- HTTPS-encrypted web access and audit logging of admin actions.
- Backup and restore tooling; license migration for disaster recovery.
- Subscriber credentials and shared secrets must be protected — restrict panel access to trusted networks where possible.
03Network security
- Standard RADIUS traffic is UDP-based and not encrypted by design — use a private network or VPN between NAS and server in hostile environments.
- Firewall RADIUS ports (1812/1813) to NAS addresses only.
- Use per-NAS shared secrets and rotate them on staff/router changes.
These are verified architecture considerations for RADIUS deployments generally — validate your specific topology with support.