ISP BNG & CGNAT Systems

Netavo BNG is our carrier-grade broadband network gateway and CGNAT platform, delivered as software for standard x86 servers. It terminates PPPoE, IPoE and L2TP subscribers, with integrated CGNAT and a full provider-edge routing stack, and it is the platform our own network runs on.

Visit netavobng.com Talk to an engineer

One platform, from the access hand-off to the core

Subscriber termination, carrier NAT and provider-edge routing on the same system, with no separate appliances and no per-feature licences.

Function	What it provides
Subscriber termination	PPPoE, IPoE and L2TP LNS, with a dual-stack subscriber held as one session per access circuit
Routing	BGP, IS-IS or OSPF, and MPLS L3VPN with per-service VRFs, so the BNG is a provider edge in your core
CGNAT	NAT44 with port-block logging, included in every licence
AAA	RADIUS with change of authorisation and disconnect, or a direct database driver
Management	A management portal showing live subscriber sessions across every access type

Live subscriber sessions in the Netavo BNG management portal — The management portal on demonstration data, showing live subscriber sessions across PPPoE, IPoE and L2TP LNS.

Software, on the servers you already buy

Netavo BNG runs on standard x86-64 servers, Intel Xeon or AMD EPYC. There is no proprietary appliance and no per-core licence, so capacity is an engineering decision rather than a commercial one: a larger server carries more traffic on the same licence.

It is licensed on a single measure, the number of subscribers, with no bandwidth tiers and no list of feature add-ons.

PlatformStandard x86-64 servers
CapacityUp to 100,000 subscriber sessions per box
Data planeDPDK, or AF_XDP for labs and virtual machines
ResilienceForwards while the control plane restarts
LicensingBy subscriber count only

Changes applied without interrupting service

admin@lns1# set subscribers ppp alice@example.net plan-name gold-1g
admin@lns1# set subscribers ppp alice@example.net download-rate 1000m
admin@lns1# set subscribers ppp alice@example.net upload-rate 200m
admin@lns1# commit
commit complete · applied to data plane in 18 ms
sessions affected 21,566 · forwarding uninterrupted

Candidate configuration with commit and rollback. Changes are applied to the data plane in place, while subscribers stay connected.

CGNAT, included or standalone

Carrier-grade NAT is part of every Netavo BNG licence: NAT44 with endpoint-independent filtering and sequence-numbered port-block logs, so the question of who held an address and port at a given moment is answered by a single query.

The same engine is being packaged as a standalone appliance, netavo-cgn, for deployment behind another vendor's BNG. It learns subscribers directly from traffic, with no integration required, and is currently offered through a design-partner programme.

TranslationNAT44, endpoint-independent filtering
LoggingSequence-numbered port-block logs (RFC 5424)
With Netavo BNGIncluded in every licence
Standalonenetavo-cgn, in design-partner preview

CGNAT bindings in the management portal, with each subscriber's inside address mapped to a public address and port block — Every translation is recorded as a subscriber, a public address and a port block.

admin@cgn1> show cgn bindings inside 100.64.12.34
public     198.51.100.17 · ports 31744–32255 · sticky affinity
since      2026-07-16 09:12:44 · flows 214 · port-cap ok
log        seq 88,214,051 → syslog collector (RFC 5424 JSON)

Each port-block allocation is a sequence-numbered log event, so who held an address and port is answered by one query.

Built and operated by network operators

Netavo BNG carries production traffic on our own network, terminating live wholesale L2TP on the same software releases we ship to customers. It is built by people who operate a network, for people who do the same.

About our network →

In productionOn Netavo's own network
ReleasesThe same software we ship to customers
EvaluationFree, for up to 50 subscribers
PricingPublished, not quoted on request

How to begin

Evaluate

A free evaluation for up to 50 subscribers, on your own hardware. The evaluation build is the production build.

Plan

Our engineers work with yours on sizing, hardware and migration from an existing platform.

Deploy

Licensed by subscriber count, with pricing published in advance.

Common questions

What is Netavo BNG?

Netavo BNG is carrier-grade broadband network gateway and CGNAT software for standard x86 servers. It terminates PPPoE, IPoE and L2TP subscribers and includes a full provider-edge routing stack.

How many subscribers can Netavo BNG terminate?

Netavo BNG terminates up to 100,000 subscriber sessions per box.

Is CGNAT an extra cost?

No. CGNAT is included in every Netavo BNG licence, with NAT44 and port-block logging.

How is Netavo BNG licensed?

Netavo BNG is licensed by subscriber count only, with no bandwidth tiers, per-core charges or feature add-ons, and its pricing is published.

Can I evaluate Netavo BNG before buying?

Yes. A free evaluation for up to 50 subscribers is available at netavobng.com, and the evaluation build is the production build.

Often delivered alongside

ISP Network Services

IP transit, backhaul and L2TP broadband for internet service providers and network operators.

Explore ISP services →

Connectivity & WAN

Fibre and Ethernet access, private WAN and resilient connectivity, from a single site to a national estate.

Explore connectivity →

Sectors we serve with this

ISPs & Network Operators

Transit, backhaul and broadband handover for UK operators, with Netavo BNG software for subscriber termination and CGNAT.

Explore ISPs and operators →

Evaluate Netavo BNG

Full specifications, documentation, pricing and the free evaluation build are on the product's own site.

Visit netavobng.com →