Connect Cudy routers to Powerlynx via RADIUS over WireGuard VPN

How it works

Cudy routers connect to Powerlynx using the built-in Captive Portal feature with RADIUS authentication over a WireGuard VPN tunnel. Configuration is done in two parts: WireGuard VPN setup under General Settings / VPN, and Captive Portal setup under General Settings / Captive Portal.

For WireGuard, you generate keys in Powerlynx, create the WireGuard interface on the Cudy device, set the IP address from Powerlynx with a /32 subnet mask, and connect to the Powerlynx VPN server on endpoint port 443. For the Captive Portal, RADIUS servers 1 and 2 are both set to 172.16.0.1, the CoA Port is set to 3799, and the RADIUS NAS ID is set to a unique value that matches the SSIDs field in both the location and splash page in Powerlynx.

The Walled Garden hosts — your Powerlynx URL and fra1.digitaloceanspaces.com — must be added to both UAM Allowed and UAM Domain lists on the Cudy device. Additional hosts are required depending on the payment gateway used.

What this integration provides

• RADIUS authentication and per-user session control — RADIUS server at 172.16.0.1.
• WireGuard VPN tunnel from Cudy to Powerlynx — endpoint port 443.
• Captive Portal via Cudy’s built-in Captive Portal module.
• CoA Port 3799 for dynamic session management.
• RADIUS NAS ID-based location and splash page matching.
• Walled Garden per payment gateway.

Who uses this

Operators who need budget-friendly hotspot hardware without giving up cloud management. Cudy is a cost-effective option for small to mid-size deployments.

Requirements

• Cudy router with WireGuard VPN and Captive Portal support.
• No public IP required.
• Firmware updated to the latest available version before setup.

How to configure a Cudy router as a hotspot controller and connect it to Powerlynx — step-by-step guide.