Radiator product
Radiator Policy Server
Radiator Policy Server is the Radiator 10 enterprise server. Built on a new high-performance core, it adds a web dashboard, log viewer, configuration templates and editor, a REST API and Lua scripting to the Radiator RADIUS and TACACS+ engine, for teams that want modern operations without giving up control.
The problem
Text-configured AAA servers are powerful but slow to onboard new staff and awkward to automate. Teams want visibility, templates and an API without the lock-in of an appliance.
Target outcome
A policy server your team can operate from a dashboard and automate from an API, with policies written as code you can review and version.
What Radiator Policy Server is
Radiator Policy Server is the enterprise edition of Radiator 10, the current generation of Radiator rewritten in Rust around a high-performance core. It keeps the protocol depth Radiator is known for and adds the operational tooling that enterprise teams expect. Radiator Software publishes versioned documentation and release notes for every build.
What it adds
- A web dashboard with statistics, per-handler counters and latency, plus licence and certificate management
- A log viewer that follows a request through authentication, authorisation and accounting, with filtering and CSV export
- Configuration templates and a built-in editor for common deployments such as Wi-Fi with Entra ID and TACACS+ device administration
- A REST API for automation, Prometheus metrics and packet capture for diagnosis
- Lua scripting, so decisions are expressed as reviewable code without a performance penalty
- RadiatorDB, an optional built-in multimaster document database with its own REST API and user interface
Protocols and identity sources
RADIUS and RadSec with TLS 1.3, TACACS+ including TACACS+ over TLS, change of authorisation, and RADIUS/1.1 over TLS. EAP-TLS, EAP-TTLS, PEAP and TEAP. Microsoft Entra ID through several flows, including certificate authentication with Entra group authorisation and Microsoft Authenticator push for multi-factor; Active Directory through LDAP or NTLM; OpenLDAP; SQL databases; JSON and REST back-ends. Multi-factor with HOTP, TOTP, YubiKey, Duo Security and RSA Authentication Manager. Vendor-specific attributes for more than 150 equipment vendors.
Where it is used
Secure Wi-Fi and VPN authentication against Entra ID and Active Directory, TACACS+ device administration with command authorisation, and eduroam or OpenRoaming proxying for universities and public bodies. The vendor’s sizing guide runs from a single CPU for a few thousand transactions per second to eight CPUs for one hundred thousand.
Licensing and support
Priced on the number of users, as a subscription or a perpetual licence. Level9 Networks supplies, configures and supports it in the UK. See licensing, support and professional services.
FAQ
Questions people ask
What is the difference between Radiator Policy Server and Radiator Core?
Both run the same Radiator 10 engine. Policy Server is packaged for enterprise Wi-Fi and device administration. Radiator Core is packaged for operators, adding IP pool allocation towards broadband gateways and sized for subscriber traffic.
Can we write policies in code?
Yes. Policies and extensions are written in Lua, so they can be reviewed, tested and version-controlled like any other code.
Which operating systems does it run on?
Red Hat Enterprise Linux 9 and 10 and compatible rebuilds, Ubuntu 22.04, 24.04 and 26.04, and Debian 12 and 13, plus official container images. It does not run on Windows.
Can it replace our existing Radiator AAA Server?
In many cases, yes. We assess your current configuration during evaluation and advise where Policy Server fits and where Radiator AAA Server remains the better choice, for example where the operator packs or hospitality integrations are needed.
Evaluate Radiator