# Radiator Policy Server

> Radiator Policy Server is the Radiator 10 enterprise server. Built on a new high-performance core, it adds a web dashboard, log viewer, configuration templates and editor, a REST API and Lua scripting to the Radiator RADIUS and TACACS+ engine, for teams that want modern operations without giving up control.

Source: https://level9.net/radiator/products/radiator-policy-server
Publisher: Level9 Networks (https://level9.net)
Updated: 2026-11-03

**Who it is for.** Enterprise and education network teams that want a RADIUS and TACACS+ server with a dashboard and an API, and organisations standardising on Radiator 10.

**The problem.** Text-configured AAA servers are powerful but slow to onboard new staff and awkward to automate. Teams want visibility, templates and an API without the lock-in of an appliance.

**Target outcome.** A policy server your team can operate from a dashboard and automate from an API, with policies written as code you can review and version.

## Measures

- Time to onboard a new administrator
- Policy changes delivered through version control and the API
- Mean time to diagnose an authentication failure using the log viewer

Vendor: Radiator Software Oy
Version: Radiator 10, current release 10.34 (September 2026)
Protocols: RADIUS, RadSec, TACACS+, TACACS+ over TLS, RADIUS/1.1 over TLS, CoA, EAP-TLS, EAP-TTLS, PEAP, TEAP
Platforms: Red Hat Enterprise Linux 9 and 10 and compatible distributions, Ubuntu 22.04 to 26.04, Debian 12 and 13, official container images for amd64 and arm64
Licence: Priced on the number of users, as a subscription or a perpetual licence, each with a defined support build date. Quoted on request.

## What Radiator Policy Server is

Radiator Policy Server is the enterprise edition of Radiator 10, the current generation of Radiator rewritten in Rust around a high-performance core. It keeps the protocol depth Radiator is known for and adds the operational tooling that enterprise teams expect. Radiator Software publishes versioned documentation and release notes for every build.

## What it adds

- A web dashboard with statistics, per-handler counters and latency, plus licence and certificate management
- A log viewer that follows a request through authentication, authorisation and accounting, with filtering and CSV export
- Configuration templates and a built-in editor for common deployments such as Wi-Fi with Entra ID and TACACS+ device administration
- A REST API for automation, Prometheus metrics and packet capture for diagnosis
- Lua scripting, so decisions are expressed as reviewable code without a performance penalty
- RadiatorDB, an optional built-in multimaster document database with its own REST API and user interface

## Protocols and identity sources

RADIUS and RadSec with TLS 1.3, TACACS+ including TACACS+ over TLS, change of authorisation, and RADIUS/1.1 over TLS. EAP-TLS, EAP-TTLS, PEAP and TEAP. Microsoft Entra ID through several flows, including certificate authentication with Entra group authorisation and Microsoft Authenticator push for multi-factor; Active Directory through LDAP or NTLM; OpenLDAP; SQL databases; JSON and REST back-ends. Multi-factor with HOTP, TOTP, YubiKey, Duo Security and RSA Authentication Manager. Vendor-specific attributes for more than 150 equipment vendors.

## Where it is used

Secure Wi-Fi and VPN authentication against Entra ID and Active Directory, TACACS+ device administration with command authorisation, and eduroam or OpenRoaming proxying for universities and public bodies. The vendor's sizing guide runs from a single CPU for a few thousand transactions per second to eight CPUs for one hundred thousand.

## Licensing and support

Priced on the number of users, as a subscription or a perpetual licence. Level9 Networks supplies, configures and supports it in the UK. See [licensing](/radiator/services/licensing), [support](/radiator/services/support) and [professional services](/radiator/services/professional-services).

## Questions people ask

**What is the difference between Radiator Policy Server and Radiator Core?**

Both run the same Radiator 10 engine. Policy Server is packaged for enterprise Wi-Fi and device administration. Radiator Core is packaged for operators, adding IP pool allocation towards broadband gateways and sized for subscriber traffic.

**Can we write policies in code?**

Yes. Policies and extensions are written in Lua, so they can be reviewed, tested and version-controlled like any other code.

**Which operating systems does it run on?**

Red Hat Enterprise Linux 9 and 10 and compatible rebuilds, Ubuntu 22.04, 24.04 and 26.04, and Debian 12 and 13, plus official container images. It does not run on Windows.

**Can it replace our existing Radiator AAA Server?**

In many cases, yes. We assess your current configuration during evaluation and advise where Policy Server fits and where Radiator AAA Server remains the better choice, for example where the operator packs or hospitality integrations are needed.

---
Level9 Networks is an authorised UK partner of Radiator Software Oy. Radiator is a trademark of Radiator Software Oy. Level9 Networks Limited, United Kingdom.