Infrastructure features, one platform
Everything an MSP needs to provision and operate OpenWrt CPE fleets — without hotspot or RADIUS complexity.
Fleet & provisioning
- Server isolation unitsEach server = OpenWISP device group + ZeroTier /24. Automatic subnet, templates, and controller routes.
- CPE lifecycleAdd WiFi AP or branch VPN CPEs, claim OpenWISP devices, move between servers, release slots.
- OpenWISP integrationDevice search, template push, config sync, and monitoring — orchestrated from the portal API.
- Device monitoringBackground sync job tracks online status, last check-in, and alerts from OpenWISP.
Branch VPN
- ZeroTier controllerBuilt-in controller creates customer networks, authorizes peers, and pushes routes automatically.
- Branch VPN CPEsConnect company branches on the same server network with OpenWrt VPN templates.
- Multi-server linksMore than 250 branches? Add a second server and link ZT networks with ServerNetworkLink.
- Admin privacySuperAdmin never joins customer VPNs — management IPs at .251–.253 only, controller at .254.
Cloud platform
- Managed hostingPortal, API, databases, OpenWISP, and ZeroTier — fully hosted. You focus on customers.
- Per-CPE billingVolume-priced monthly billing per active CPE via Kashier — same model as WitRADIUS Admin points.
- Hardware catalogOrder WitWrt-flashed routers from the integrated store with tracked shipping.
- EN / AR adminFull bilingual portal with RTL — every string, error, and report in both languages.
Roles & tenancy
- Admin (MSP)Owns servers and CPEs, manages billing, sub-accounts, and customer orgs.
- DistributorUser role created by Admin — resell under your org with scoped operator accounts.
- OperatorDay-to-day CPE operations within assigned servers — no billing config.
- Org isolationEvery query scoped by organization — no cross-tenant data leaks by design.
