Onezeroart LLC

Appearance

Zal Ultra Basic Setup Guide ​

This comprehensive guide will walk you through the essential configuration steps after installing Zal Ultra ISP CRM. Follow these steps in order for optimal system setup.

Default Login Credentials ​

After completing installation, access Zal Ultra using these default credentials:

RoleEmailPasswordLogin URL
Super Admin[email protected]12345678http://your-server-ip/login
Admin[email protected]12345678http://your-server-ip/login
Reselleryour emailyour passwordhttp://your-server-ip/login
Sub-reselleryour emailyour passwordhttp://your-server-ip/login
Retaileryour emailyour passwordhttp://your-server-ip/login
Subscriberyour emailyour passwordhttp://your-server-ip/subscriber-login

⚠️ Security Warning: Change default passwords immediately after first login!

Step 1: Auto-Load Basic Settings ​

Sync System Configuration ​

Before logging in, navigate to the sync URL to automatically load basic system settings:

http://your-server-ip/sync

What this does:

  • ✅ Loads default system configurations
  • ✅ Initializes database settings
  • ✅ Sets up basic permissions
  • ✅ Prepares system for first use
  • ✅ Configures default values

Expected Result:

  • You should see a success message
  • System is now ready for login
  • Basic settings are pre-configured

Step 2: Login and Update Settings ​

2.1 Login to Admin Panel ​

Navigate to: http://your-server-ip/login

Use the default admin credentials:

2.2 Update All Settings Pages ​

After login, you must update all settings pages one by one. This is crucial for proper system operation.

Priority Settings (Update First): ​

A. General Settings

  • Company name
  • Company logo
  • Contact information
  • Address details
  • SEO meta data
  • Time zone
  • Currency settings
  • Date format
  • Language preferences

B. Software Settings

  • Phone number format [11-13 digits]
  • Identity format [11-13 digits]
  • Online page auto-reload time
  • Table view type (datatable format)
  • Google Map API (enable/disable)
  • System behavior settings

C. User Settings

  • Document verification requirements
  • Phone verification (OTP)
  • Email verification (OTP)
  • Allow duplicate phone numbers
  • Allow duplicate NID/NIC/Identity
  • User registration rules

D. Subscriber Settings

  • Identity file verification
  • Phone verification (OTP)
  • Email verification (OTP)
  • Self-registration (enable/disable)
  • Show volume info to subscribers
  • Allow subscribers to update data
  • Password reset options
  • Login log tracking
  • Session log tracking
  • Self-activation (enable/disable)
  • Show all packages or assigned only
  • Grace period status
  • Allow duplicate phone numbers
  • Allow duplicate NID/NIC/Identity

Additional Settings (Configure as Needed): ​

E. SMS Settings

  • Gateway name
  • SMS status (enable/disable)
  • Attribute type
  • Attribute name
  • Attribute value
  • SMS provider configuration

F. Email Settings

  • Email status (enable/disable)
  • From email address
  • SMTP host
  • SMTP username
  • SMTP password
  • SMTP port (25, 465, 587)
  • Encryption (SSL/TLS)

G. Payment Gateway Settings

  • Payment gateway status
  • Gateway mode (Live/Sandbox)
  • Provider-specific configurations

H. Captive Portal Settings

  • Portal status (enable/disable)
  • Portal title, subtitle, description
  • Portal footer and link
  • Signup description
  • QR code printing
  • Portal banner upload
  • Field requirements (name, username, phone, email, etc.)
  • Social media login
  • OTP verification
  • Pre-defined salesperson
  • Pre-defined package

I. Software Modules Settings

  • Voucher module status
  • Prepaid card module status
  • Inventory module status
  • Tickets module status
  • Notices module status
  • Department module status

Step 3: Configure Network Infrastructure ​

3.1 Add Areas ​

Navigation: Network → Area → Add Area

Purpose: Define geographic service areas for your ISP business.

Required Information:

  • Area name
  • Area code
  • Description
  • Coverage details

Why Important:

  • Organize subscribers by location
  • Generate area-wise reports
  • Manage service zones
  • Track regional performance

3.2 Create Area Groups ​

Navigation: Network → Area → Area Group

Purpose: Group multiple areas for better management.

Use Cases:

  • Regional grouping
  • Service tier zones
  • Billing zones
  • Coverage mapping

3.3 Add NAS (Network Access Server) ​

Navigation: Network → NAS

Purpose: Add your routers/NAS devices that will authenticate subscribers via RADIUS.

Required Information:

  • NAS name
  • NAS IP address
  • NAS type (MikroTik, Cisco, Juniper, etc.)
  • RADIUS secret key
  • CoA port (default: 3799)
  • API settings (for MikroTik)
    • API port: 8728 (standard) or 8729 (SSL)
    • API username
    • API password

Supported NAS Types:

  • MikroTik
  • Cisco
  • Juniper
  • Ubiquiti
  • pfSense
  • vBNG/Bison BNG
  • And 50+ more vendors

Important Checks:

  • ✅ NAS IP is reachable from Zal Ultra server
  • ✅ RADIUS secret matches on both sides
  • ✅ Firewall allows RADIUS ports (1812, 1813, 3799)
  • ✅ API is enabled (for MikroTik)
  • ✅ Test connection using "Instant Check" button

3.4 Create NAS Groups ​

Navigation: Network → NAS Group

Purpose: Group NAS devices for easier management.

Benefits:

  • Assign multiple NAS to subscribers
  • Manage NAS by region or type
  • Simplify configuration
  • Better organization

Step 4: User Management Setup ​

4.1 Create Roles and Permissions ​

Navigation: Users → Roles

Purpose: Define access levels for different user types.

Default Roles:

  • Super Admin (full access)
  • Admin (ISP owner)
  • Branch Manager
  • Reseller
  • Sub-reseller
  • Retailer
  • Staff (various types)

Steps:

  1. Click "Add New Role"
  2. Enter role name
  3. Select permissions (400+ available)
  4. Save role

Permission Categories:

  • Dashboard access
  • Subscriber management
  • Package management
  • Accounting and invoicing
  • Network management
  • Reports and analytics
  • Settings access
  • User management
  • And more...

Pro Tip: Use "Copy Role" to duplicate existing roles and modify permissions.

4.2 Add Users (Staff/Resellers/Sub-resellers/Retailers) ​

Navigation: Users → Users → Add New User

Required Information:

  • Full name
  • Email address
  • Phone number
  • Username
  • Password
  • Role assignment
  • Profile type (Staff, Reseller, Sub-reseller, Retailer)
  • Department (if applicable)
  • Area assignment
  • NAS group assignment
  • Accounting limit (if applicable)

User Types:

  • Staff: Employees who manage operations
  • Reseller: Primary distribution partners
  • Sub-reseller: Secondary distribution partners
  • Retailer: End-point sales representatives

Important Settings:

  • Balance deduction status
  • Allowed connections (devices/interfaces)
  • Skip auto-renew option
  • Profile billing type (prepaid/postpaid)

Step 5: Create Policies and Packages ​

5.1 Add RADIUS Policies ​

Navigation: Policy → Add New Policy

Purpose: Define RADIUS attributes for bandwidth control and subscriber management.

What to Configure:

  • Policy name
  • Upload speed limit
  • Download speed limit
  • Burst speed (optional)
  • IP address assignment
  • Address list (MikroTik)
  • Session timeout
  • Idle timeout
  • And 200+ RADIUS attributes

Supported Attributes:

  • Cisco attributes
  • Juniper attributes
  • MikroTik attributes
  • vBNG attributes
  • Standard RADIUS attributes

Pro Tip: Use "Copy Policy" to create variations of existing policies.

5.2 Create Service Packages ​

Navigation: Packages → Add New Package

Purpose: Define service plans for subscribers.

Required Configuration:

Basic Settings:

  • Package name
  • Package description
  • Service type (Internet, VoIP, etc.)
  • Billing type (Prepaid/Postpaid)
  • Package duration (days to years)

Pricing:

  • Base price
  • Admin profit
  • Reseller profit
  • Sub-reseller profit
  • Retailer profit
  • Tax/Extra fees

Technical Settings:

  • Policy assignment (bandwidth control)
  • IP pool (for active subscribers)
  • Expired IP pool (for expired subscribers)
  • Data quota (total bandwidth volume)
  • Session quota (total time limit)
  • FUP (Fair Usage Policy)

Advanced Features:

  • Auto-renewal (enable/disable)
  • Auto-generate invoice
  • Fixed expiry date
  • Fixed expiry time
  • Fixed expiry date accounting (hourly/daily)
  • Allocation rules (day/time-based bandwidth)
  • Next expired behavior (disconnect/continue)
  • Next disabled behavior (disconnect/continue)
  • Allow captive portal
  • Update attributes automatically

5.3 Assign Packages to Users ​

Navigation: My Packages → Assign Packages

Purpose: Distribute packages to resellers/sub-resellers/retailers.

Steps:

  1. Select user (reseller/sub-reseller/retailer)
  2. Select package to assign
  3. Set pricing for this user:
    • User's purchase price
    • User's profit margin
    • Subscriber price
  4. Save assignment

Pricing Example:

Admin sells package at 100 BDT + 20 BDT profit = 120 BDT
↓
Reseller buys at 120 BDT + adds 20 BDT profit = 140 BDT
↓
Sub-reseller buys at 140 BDT + adds 20 BDT profit = 160 BDT
↓
Subscriber pays 160 BDT

Important: Each level can set their own profit margin and subscriber pricing.

Step 6: Add or Import Subscribers ​

6.1 Add Subscribers Manually ​

Navigation: Subscriber → Add New Subscriber

Required Information:

  • Full name
  • Username (unique)
  • Password
  • Phone number
  • Email address
  • Identity number (NID/NIC/Passport)
  • Address
  • Area assignment
  • Salesperson (reseller/sub-reseller/retailer)
  • Package selection
  • Billing type

Optional Information:

  • Profile photo
  • Documents (ID proof, address proof)
  • Box/POP information
  • MAC address (for MAC binding)
  • Custom notes

6.2 Import Subscribers (Bulk) ​

Navigation: Subscriber → Import Subscribers

Steps:

  1. Download CSV template
  2. Fill subscriber information in CSV
  3. Upload CSV file
  4. Map CSV columns to system fields
  5. Validate data
  6. Import subscribers

CSV Format:

  • Name, Username, Password, Phone, Email, Identity, Address, Area, Package, etc.

Benefits:

  • Import thousands of subscribers at once
  • Save time on data entry
  • Migrate from other systems
  • Bulk onboarding

Pro Tip: Use filtration to import specific subscriber groups.

Step 7: Connect Zal Ultra with Routers (RADIUS AAA) ​

7.1 Configure RADIUS on Your Router/NAS ​

For MikroTik:

routeros
/radius
add address=YOUR_ZAL_ULTRA_SERVER_IP \
    secret=YOUR_RADIUS_SECRET \
    service=ppp,hotspot,login \
    timeout=3s

/radius incoming
set accept=yes port=3799

For Cisco:

cisco
aaa new-model
aaa authentication ppp default group radius
aaa authorization network default group radius
aaa accounting network default start-stop group radius

radius-server host YOUR_ZAL_ULTRA_SERVER_IP auth-port 1812 acct-port 1813
radius-server key YOUR_RADIUS_SECRET

For Juniper:

junos
set system radius-server YOUR_ZAL_ULTRA_SERVER_IP secret YOUR_RADIUS_SECRET
set system radius-server YOUR_ZAL_ULTRA_SERVER_IP port 1812
set access profile RADIUS_PROFILE radius authentication-order radius
set access profile RADIUS_PROFILE radius accounting-order radius

7.2 Test RADIUS Connection ​

From Zal Ultra:

  1. Go to Network → NAS
  2. Find your NAS entry
  3. Click "Instant Check" button
  4. Verify connection status

From Router:

  • Check RADIUS logs
  • Test with a subscriber login
  • Verify authentication works

Common RADIUS Ports:

  • 1812: Authentication
  • 1813: Accounting
  • 3799: CoA (Change of Authorization)

Firewall Rules Required:

bash
# On Zal Ultra server
sudo ufw allow 1812/udp
sudo ufw allow 1813/udp
sudo ufw allow 3799/udp

7.3 Verify RADIUS Integration ​

Test Checklist:

  • ✅ Subscriber can authenticate
  • ✅ Session starts successfully
  • ✅ Bandwidth limits applied correctly
  • ✅ IP address assigned properly
  • ✅ Session logs recorded in Zal Ultra
  • ✅ Accounting data received
  • ✅ CoA commands work (disconnect, bandwidth change)

Documentation:

Step 8: Activate Subscribers ​

8.1 Why Activation is Important ​

Activation ensures:

  • ✅ RADIUS attributes are set correctly
  • ✅ Subscriber profile is complete
  • ✅ Billing is initialized
  • ✅ Expiry date is set
  • ✅ Package settings applied
  • ✅ Subscriber can authenticate

8.2 Single Subscriber Activation ​

Navigation: Subscriber → Subscriber List → Select Subscriber → Activate

Activation Options:

  • Package selection
  • Activation date
  • Expiry date
  • Payment method (Cash, Balance, Online)
  • Discount (if applicable)
  • Tax/Extra fees
  • Invoice generation

Payment Methods:

  1. Cash/Invoice (Postpaid): Reseller balance is cut, collect cash later
  2. Subscriber Balance (Prepaid): Subscriber balance is cut immediately
  3. Online Payment: Subscriber pays via payment gateway

8.3 Mass Activation ​

Navigation: Subscriber → Mass Activation

Purpose: Activate hundreds of subscribers at once.

Steps:

  1. Filter subscribers (by area, package, status, etc.)
  2. Select subscribers to activate
  3. Choose package
  4. Set activation/expiry dates
  5. Select payment method
  6. Apply discount (optional)
  7. Activate all

Benefits:

  • Save time on bulk operations
  • Consistent activation settings
  • Efficient subscriber onboarding

8.4 Verify Activation ​

Check:

  • ✅ Subscriber status changed to "Active"
  • ✅ Expiry date is set correctly
  • ✅ Invoice generated
  • ✅ RADIUS attributes applied
  • ✅ Subscriber can login to router
  • ✅ Bandwidth limits working
  • ✅ Session logs appearing

Step 9: Configure Additional Features (Optional) ​

9.1 Payment Gateway Integration ​

Navigation: Settings → Payment Gateway Settings

Available Gateways:

  • Bkash (Bangladesh)
  • SSL Commerz (Bangladesh)
  • Nagad (Bangladesh)
  • Razorpay (India)
  • JazzCash (Pakistan)
  • Easypaisa (Pakistan)
  • PayStack (Africa)
  • M-Pesa (Kenya)
  • Stripe (Global)
  • PayPal (Global)

Configuration:

  • Enable gateway
  • Set mode (Live/Sandbox)
  • Enter API credentials
  • Configure webhook URLs
  • Test transactions

Benefits:

  • Subscribers can pay online
  • Automatic payment confirmation
  • Reduce manual payment collection
  • Improve cash flow

9.2 SMS Gateway Integration ​

Navigation: Settings → SMS Settings

Purpose: Send automated SMS notifications to subscribers.

Supported Gateways:

  • Twilio
  • Nexmo
  • Custom SMS gateways

SMS Use Cases:

  • Payment reminders
  • Expiry alerts
  • Service updates
  • OTP verification
  • Welcome messages
  • Invoice notifications

Configuration:

  • Gateway name
  • API credentials
  • Sender ID
  • SMS templates

9.3 Email Gateway Integration ​

Navigation: Settings → Email Settings

Purpose: Send automated emails to subscribers.

Supported Methods:

  • SMTP (any provider)
  • SendGrid
  • Mailgun
  • Amazon SES

Email Use Cases:

  • Invoice delivery
  • Payment receipts
  • Expiry notifications
  • Welcome emails
  • Password reset
  • Account updates

Configuration:

  • SMTP host and port
  • Username and password
  • Encryption (SSL/TLS)
  • From email address
  • Email templates

9.4 Captive Portal Setup ​

Navigation: Settings → Captive Portal Settings

Purpose: Allow subscribers to self-register and activate services.

Features:

  • Custom branding (logo, colors, banner)
  • Self-registration form
  • Package selection
  • Online payment integration
  • OTP verification
  • Social media login
  • QR code access

Configuration:

  • Enable captive portal
  • Set portal title and description
  • Upload banner image
  • Configure required fields
  • Set pre-defined salesperson
  • Set pre-defined packages
  • Enable payment gateways

9.5 Inventory Management ​

Navigation: Inventory

Purpose: Track hardware and equipment.

Features:

  • Item management (routers, cables, ONUs, etc.)
  • Categories
  • Suppliers
  • Storage locations
  • Stock tracking
  • Purchase orders

9.6 Ticketing System ​

Navigation: Tickets

Purpose: Manage customer support requests.

Features:

  • Ticket creation (by staff and subscribers)
  • Category management
  • Priority levels
  • Assignment to staff
  • Status tracking
  • Internal notes
  • Email notifications

9.7 Voucher and Prepaid Cards ​

Navigation: Vouchers / Prepaid Cards

Purpose: Generate prepaid access codes.

Features:

  • Card/voucher generation
  • Batch creation
  • Expiry management
  • Usage tracking
  • Reseller distribution
  • PIN protection
  • Print vouchers

Step 10: Testing and Verification ​

10.1 Test Subscriber Authentication ​

Steps:

  1. Create a test subscriber
  2. Activate with a package
  3. Try to login from router/NAS
  4. Verify authentication succeeds
  5. Check bandwidth limits applied
  6. Monitor session in Zal Ultra

10.2 Test Accounting ​

Verify:

  • ✅ Session logs recorded
  • ✅ Data usage tracked
  • ✅ Connection time logged
  • ✅ IP address recorded
  • ✅ NAS information correct

10.3 Test CoA (Change of Authorization) ​

Test Commands:

  • Disconnect subscriber
  • Change bandwidth dynamically
  • Force re-authentication

Verify:

  • ✅ Commands execute successfully
  • ✅ Changes apply immediately
  • ✅ Logs recorded in CoA logs

10.4 Test Billing ​

Verify:

  • ✅ Invoices generated correctly
  • ✅ Payments recorded properly
  • ✅ Balance calculations accurate
  • ✅ Profit distribution correct
  • ✅ Ledger entries accurate

10.5 Test Auto-Renewal ​

Steps:

  1. Enable auto-renewal on package
  2. Set subscriber with sufficient balance
  3. Wait for expiry
  4. Verify auto-renewal triggers
  5. Check new expiry date
  6. Verify invoice generated

Common Issues and Solutions ​

Issue 1: Subscribers Can't Authenticate ​

Possible Causes:

  • RADIUS secret mismatch
  • Firewall blocking ports
  • NAS not added in Zal Ultra
  • Subscriber not activated
  • Wrong username/password

Solutions:

  • Verify RADIUS secret matches
  • Check firewall rules (1812, 1813, 3799)
  • Add NAS in Zal Ultra
  • Activate subscriber properly
  • Reset subscriber password

Issue 2: Bandwidth Limits Not Working ​

Possible Causes:

  • Policy not assigned to package
  • RADIUS attributes not applied
  • Router not applying attributes
  • Subscriber attributes not synced

Solutions:

  • Assign policy to package
  • Re-activate subscriber
  • Check router RADIUS configuration
  • Use "Sync Attributes" button

Issue 3: Session Logs Not Appearing ​

Possible Causes:

  • Accounting not configured on router
  • Firewall blocking port 1813
  • NAS not sending accounting packets

Solutions:

  • Enable RADIUS accounting on router
  • Allow port 1813 in firewall
  • Check NAS configuration
  • Verify accounting server IP

Issue 4: CoA Not Working ​

Possible Causes:

  • CoA port blocked (3799)
  • CoA not enabled on router
  • RADIUS secret mismatch

Solutions:

  • Allow port 3799 in firewall
  • Enable CoA on router
  • Verify RADIUS secret
  • Test with radclient command

Next Steps ​

After completing basic setup, explore these advanced features:

Documentation:

Support:

Summary Checklist ​

Use this checklist to ensure you've completed all basic setup steps:

  • [ ] Navigated to /sync to load basic settings
  • [ ] Logged in with default credentials
  • [ ] Changed default passwords
  • [ ] Updated General Settings
  • [ ] Updated Software Settings
  • [ ] Updated User Settings
  • [ ] Updated Subscriber Settings
  • [ ] Configured SMS Settings (optional)
  • [ ] Configured Email Settings (optional)
  • [ ] Added Areas
  • [ ] Created Area Groups
  • [ ] Added NAS devices
  • [ ] Created NAS Groups
  • [ ] Created Roles with Permissions
  • [ ] Added Users (Staff/Resellers)
  • [ ] Created RADIUS Policies
  • [ ] Created Service Packages
  • [ ] Assigned Packages to Users
  • [ ] Added or Imported Subscribers
  • [ ] Configured RADIUS on Router
  • [ ] Tested RADIUS Connection
  • [ ] Activated Subscribers
  • [ ] Verified Subscriber Authentication
  • [ ] Tested Session Logging
  • [ ] Tested CoA Commands
  • [ ] Configured Payment Gateways (optional)
  • [ ] Set up Captive Portal (optional)

Congratulations! Your Zal Ultra ISP CRM is now fully configured and ready for production use! 🎉

www.onezeroart.com

© 2025 Onezeroart LLC. All Rights Reserved.