WitRADIUSWitRADIUS
Back to guide

Network Admin — Complete Guide

Run multiple WiFi hotspots, manage users and vouchers, onboard sub-admins and distributors, and track every penny of revenue. This guide walks you through every screen in the Admin panel — from your first login to advanced reporting.

1. What an Admin can do

The Admin role is the workhorse of WitRADIUS. As an Admin you own one or more servers (each server is an isolated RADIUS database) and within each server you operate any number of hotspots (physical router locations). Inside that scope you have full control: profiles, voucher batches, WiFi users, sessions, captive portal customization, sub-admins, and analytics.

Admins are billed monthly per hotspot (with steep volume discounts — see the pricing page). You can also create sub-admins, distributors and operators who share your billing and live inside your servers.

You cannot: see other admins' data, change platform-wide billing rates, or modify the controller infrastructure. Those belong to the SuperAdmin.

2. Dashboard

After logging in at portal.witradius.com you land on the Dashboard — your operations center.

What you see

  • Active sessions across all your hotspots, refreshing every few seconds
  • Today's revenue from voucher sales (sum across all your batches sold today)
  • Top hotspots by session count and by bandwidth in the last 24h
  • Top users by data consumption — useful for spotting abuse or troubleshooting
  • System health indicator: green if your controller and RADIUS are responding, amber if there's elevated latency, red if there's an outage
  • Quick actions sidebar: "Create voucher batch", "Add hotspot", "View today's sessions"

Tips

  • The dashboard auto-refreshes — you don't need to reload manually
  • Use the date range picker (top-right) to look back over the past day, week or month
  • Click any hotspot name to jump straight to that hotspot's detail page

3. My Billing

Everything about your subscription, payments and wallet lives here.

Sub-tabs

  • Current plan — the plan you're on (e.g. "Network Admin"), the per-hotspot rate, and your next renewal date. To switch plans, email us — plan changes are processed manually so we can pro-rate your invoice fairly
  • Wallet balance — pre-loaded credit that auto-deducts on renewal. Top up here to avoid service interruption
  • Invoices — every monthly invoice as a downloadable PDF for your accountant
  • Transactions — a ledger of every Kashier payment, refund, and wallet adjustment

Top up the wallet

Click Top Up, enter an amount in EGP, choose a payment method (Visa, Mastercard, Meeza, or wallet) and complete the Kashier checkout. The balance updates within a few seconds of confirmation.

What if I don't pay?

A grace period of 7 days starts on your renewal date. After that, your hotspots stop accepting new sessions but existing data isn't deleted. Pay any time during the grace period (or up to 30 days after) to resume service instantly.

4. Servers

A server is a dedicated, isolated RADIUS database. Your server is provisioned automatically when you sign up — you don't create it, configure it, or delete it. Most admins only ever need this one server.

The Servers page is mostly informational: it shows what you own and lets you give it a friendly display name. If you need a second server (because you operate separate brands that should not share users, profiles or vouchers — e.g. two unrelated hotel chains), email us and we'll provision and bill it for you.

List view columns

  • Name — the friendly display name (rename from the row action)
  • Status — online (green) / offline (red) / pending provisioning (amber)
  • Hotspots count — how many hotspots are attached
  • Sessions today — quick health metric

What you can do here

  • View the list and per-server details (status, hotspot count, sessions)
  • View stats — a quick health card per server
  • Rename the server's display name (just the friendly label — internal IDs don't change)

What you cannot do here

For your protection, the platform does not let admins create, reconfigure, or delete servers. Those actions are restricted to platform operators. Email [email protected] for any of the following:

  • Provision an additional server
  • Decommission an existing server
  • Change the underlying RADIUS configuration
  • Manually re-sync profiles to the server

5. Sub-Admins

You can delegate management of some of your hotspots to other people — your own staff or business partners — by creating sub-admins. Each sub-admin gets their own login but their billing is consolidated under your account.

Workflow

  1. Click Add admin
  2. Enter their name, email, and choose a temporary password
  3. Optionally restrict their scope (specific servers / hotspots) — by default they see everything
  4. Save. The platform sends them a "welcome" email with login instructions

What sub-admins can do

Sub-admins can do almost everything you can, except:

  • They cannot see or modify the My Billing page (you control billing)
  • They cannot order hardware from the store (you place orders)
  • They cannot create more sub-admins (only you can)

Removing a sub-admin

Open their row → Edit → toggle Active off. Their login is disabled immediately. Their historical actions remain in the audit log.

6. Hotspots

A hotspot is one physical router location — a café, a hotel floor, a clinic waiting room, your own home. Each hotspot is attached to one server.

List view columns

  • Name — the friendly name (e.g. "Lobby AP")
  • Server — which server it belongs to
  • NAS IP — the IP address the RADIUS daemon uses to identify this hotspot
  • Status — online (heartbeat received within last 5 min) / offline / never seen
  • Last seen — relative time since last heartbeat
  • Sessions today / Active now

Adding a hotspot

  1. Click Add hotspot
  2. Name it (e.g. "Main branch — first floor")
  3. Choose its server
  4. Assign a NAS IP. Pick something unique within the server (we suggest the ZeroTier-assigned IP of your router; you'll see it after the router joins the network)
  5. Optionally: address, city, GPS coordinates, contact phone — used in reporting and on receipts
  6. Choose a default profile — what new vouchers for this hotspot use by default
  7. Optionally bind a login page template (otherwise the server-default is used)
  8. Save

Hotspot detail page

Tabs:

  • Overview — status, counts, last 24h chart
  • Live sessions — currently connected devices with username, IP, MAC, bytes used
  • Sessions history — searchable / filterable
  • Open LuCI — embedded OpenWrt admin UI for this router (uses ZeroTier tunnel, no port forwarding needed). Only works for WitWrt-flashed routers
  • Walled garden — domains exempt from authentication (e.g. *.kashier.io for payment)
  • Danger Zone — rename / delete

Deleting a hotspot doesn't delete the historical sessions or vouchers, but it stops accepting new authentications. You'll be billed pro-rata for the partial month.

7. Login Pages (captive portal)

A login page is the splash screen WiFi users see when they first connect. It's fully customizable per server (and per hotspot if you bind a specific one).

What you can customize

  • Logo — upload PNG/JPG (max 1 MB)
  • Brand colors — primary and accent
  • Welcome message — bilingual, both EN and AR fields
  • Login methods — toggle voucher / username+password / social / free-with-ad
  • Terms of service — paste your text or upload a PDF; users tick a box before login
  • Footer credits — small text shown at the bottom (e.g. "Powered by My Café")

Live preview

The right panel shows what users will see — desktop, tablet, mobile sizes. Edit on the left, preview updates in real time. Click Save to commit. Active sessions are not affected; new sessions get the new look.

Pro tip

Use the Walled garden field at the bottom to allow your customers to access your menu site or social pages before logging in. Common entries: your domain, payment gateway domains, WhatsApp web (web.whatsapp.com), and font CDNs.

8. Profiles

A profile defines what a voucher (or user account) gets: time, data, speed, concurrent session limits, and validity period. Think of it as a "WiFi product".

Profile fields

  • Name — e.g. "1 hour, 500 MB", "Daily unlimited", "Monthly 10 GB"
  • Time quota — total minutes (e.g. 60 for 1 hour, 1440 for 24 hours, 0 for unlimited)
  • Data quota — total bytes up + down (e.g. 524288000 for 500 MB, 0 for unlimited)
  • Speed limits — download / upload kbps (use 0 for no limit)
  • Concurrent sessions — usually 1 (one device per code) or 2-3 for family vouchers
  • Validity window — how long after first use the voucher remains valid (e.g. 24 hours means the user has 24 hours to consume their quota once they first connect)
  • Idle timeout — auto-logout after N minutes of inactivity. Default 10
  • Monthly recurring — enable for prepaid users where the quota resets every month

Tips

  • Keep your profile catalog small — 4 to 8 well-named profiles are easier to sell than 30 niche ones
  • Use the Clone action to base a new profile on an existing one
  • Profiles are shared across all hotspots in a server — a single "Daily 5 GB" profile is used by every batch

9. Batches (vouchers)

A batch is a group of voucher codes generated together. The day-to-day life of a paid WiFi operator revolves around this page.

Creating a batch

  1. Click Add batch
  2. Pick a profile (which determines time/data/speed)
  3. Pick the hotspot(s) it should be valid at (default: all in the server)
  4. Set quantity — how many codes to generate
  5. Optionally set expiry — when unused codes auto-expire
  6. Optionally tag with a batch name ("March-2026 first run") for tracking
  7. Choose a printing template (see next section)
  8. Click Generate. The codes are created instantly. Click Print to download a print-ready PDF

Selling vouchers

Hand the printed cards to your cashier or distributor. When a customer pays, scratch the silver foil to reveal the code. The customer enters it on the captive portal and starts using WiFi.

Tracking usage

The batch list view shows: total codes, codes used, codes remaining, total revenue (qty × price × sold count), and "burn rate" (codes used per day on average — helpful for predicting when you'll need to print more).

Refunds & voids

Open a batch → click any voucher row → Void. The code is invalidated. If the customer already used it, you can refund instead which credits their wallet (if they had a wallet).

10. Printing Templates

Customize the look of your printed voucher cards.

Built-in templates

  • Compact — 12 cards per A4 page, minimal design
  • Premium — 6 cards per A4 with gradient background and your logo prominent
  • Receipt-roll — single-column for thermal receipt printers (80 mm width)

Custom templates

Click Add template:

  • Set page size (A4, A5, receipt roll)
  • Set cards-per-page
  • Upload background image and logo
  • Choose font (Cairo for Arabic, Inter for English; auto-switches based on locale)
  • Drag-and-drop the code, expiry, and instructions text blocks
  • Save → preview → use in any batch

Print quality tips

Use a 600 dpi printer, scratch-off stickers (sold in stationery shops), and laminate the front for durability. Receipt-roll templates work well with Bluetooth thermal printers for mobile sales.

11. WiFi Users

Anyone who has ever authenticated at one of your hotspots gets a record here, whether they used a voucher (anonymous) or registered an account.

List view columns

  • Username — the voucher code or registered username
  • Profile — what they're using
  • MAC address — auto-detected on first connection
  • Status — Active / Expired / Disabled / Wallet
  • Total used — bytes consumed
  • Last seen — last successful auth

Filters

By status, by profile, by hotspot, by date range. Hit Export to download a CSV.

Per-user actions

Open a user → you can:

  • View their full session history
  • Disable them (they cannot log in again until re-enabled)
  • Reset their data counter (useful for monthly users on edge cases)
  • Top up their wallet (for prepaid recurring users)
  • Add a note (free text, visible to all your sub-admins)

12. Sessions

Every successful authentication produces a session record — even if the user only stayed for 30 seconds.

Columns

  • Username — voucher code or account name
  • Hotspot — where they connected
  • Started / Stopped — timestamps
  • Duration — minutes
  • Bytes in/out — exact data usage
  • Terminate cause — why the session ended (idle-timeout, user-logout, NAS-reboot, session-timeout, admin-reset)
  • MAC / IP — for forensics

Use cases

  • Customer disputes "I only used 1 hour but you charged me 3" → look up their MAC, see actual session times
  • Spot a heavy user → click through to their record → maybe issue a higher-tier voucher
  • Investigate a hotspot complaint → filter to that hotspot, look for unusual termination causes

13. Auth Logs

Unlike Sessions (which only records successful authentications), Auth Logs records every attempt — including the failed ones.

This is your debugging gold mine when a user reports "my code doesn't work":

  • Filter by username (their code) → see whether the request even reached the server
  • Look at the reply column for the rejection reason: unknown user, wrong password, account expired, simultaneous-use limit reached, walled-garden timeout, etc.

If the failed request isn't here at all, the problem is upstream (router not reaching the controller, ZeroTier disconnected) — head to the hotspot detail page to check status.

14. Statistics

Aggregated reporting for managers. Pick a date range (today, this week, this month, custom) and a grouping (hotspot, profile, day, distributor) and the page builds:

  • A line chart of sessions / bandwidth / revenue over time
  • A bar chart of top entities by your chosen metric
  • A pivot table of the raw numbers (downloadable as CSV / Excel)

This is what you send to your accountant at month-end.

15. Traffic Accounting

Detailed per-hour bandwidth charts per hotspot and per-user, with downloadable per-day raw buckets. Use this when you need to reconcile what your upstream ISP billed you against what you actually delivered to customers.

16. My ZeroTier

WitRADIUS uses ZeroTier as the secure private network tunnel between your routers and our controller. This page shows:

  • Your ZeroTier network ID for each of your servers (give this to anyone flashing a router)
  • The list of member nodes (routers) currently joined, with online status, last seen, assigned IP
  • An Authorize / Deauthorize toggle for each member — auto-authorize is on by default but you can revoke any router's access here

If a router shows online in ZeroTier but offline in the Hotspots list, the tunnel is fine but the RADIUS daemon on the router isn't responding — check the router's logs via LuCI.

17. Hardware Guide, Store & Orders

Visible only to directly registered admins (not sub-admins created by another admin).

Hardware Guide

A growing library of supported router models with photos, specifications, flashing instructions, and known issues. Use this before buying a router elsewhere — make sure the model is supported.

Hardware Store

Browse pre-flashed WitWrt routers we sell in Egypt. Add to cart, complete checkout via Kashier. We ship via Bosta within 1-3 business days.

All hardware sold is refurbished pre-owned equipment reconfigured with WitWrt firmware. 3-month warranty applies. See the Refund Policy for details.

My Orders

Track every order: pending → processing → shipped (with Bosta tracking number) → delivered. Click any order for the invoice, the recipient address, and the tracking link.

18. Account & password

Top-right corner of every page → your name → Account:

  • Change password
  • Change preferred language (English / Arabic) — affects this admin login only
  • Change theme (light / dark / auto)
  • View your sub-user status if you were created by a parent admin

Forgot password? Click the Forgot password? link on the login page. We email you a reset link valid for 1 hour.

19. Tips, gotchas & best practice

  • One server is usually enough. Resist the temptation to spin up a server per hotspot — it's harder to manage and doesn't save you anything
  • Use named batches. Future-you will thank you when you need to know which printing run the code came from
  • Walled garden = your menu page. Customers who haven't paid yet should still be able to see your menu, your social, and your TripAdvisor reviews. Allow those domains in the walled garden
  • Test in incognito. Browser saved logins can mask captive portal issues. Always test in private/incognito mode
  • Keep your profile names short and customer-friendly. "1 hour, 1 GB" beats "Profile_Standard_v3"
  • Top up your wallet ahead of renewal. Set a calendar reminder for 5 days before renewal
  • Watch the auth logs after changes. After editing a profile or login page, watch for failed auths in the next hour — sometimes a typo breaks something
  • Backups happen automatically. Nightly snapshots are taken. To restore, email us with the date you need

Stuck on anything? Email [email protected] — we usually reply within an hour during business days.