Start a conversation

Radiator solution

Network device administration with TACACS+

No more shared admin passwords on switches, routers and firewalls. Radiator provides TACACS+ and RADIUS device administration tied to your directory groups, with per-command authorisation, multi-factor on privileged access and an accounting trail your assessor will accept.

Updated 3 November 2026 · Level9 Networks

The problem

Shared local accounts on network devices cannot be audited and cannot be revoked when people leave. Vendor-specific tools cover one estate and leave the rest.

Target outcome

Every administrative session on every device is tied to a named person, authorised command by command where needed, and recorded.

The outcome

Engineers log in to any device with their own account. Their role decides what they can do. Privileged access needs a second factor. Every session and command is recorded centrally, and when someone leaves, disabling one account disables their access everywhere.

How it works

Devices send authentication, authorisation and accounting to Radiator over TACACS+ or RADIUS, with TACACS+ over TLS available in Radiator Policy Server. Radiator checks credentials against Active Directory, Entra ID or LDAP, maps group membership to a role, and returns the privilege level or command authorisation. Accounting records go to your logging platform for audit.

What Level9 does

We design the role model with your team, configure Radiator, integrate the directory and multi-factor service, and migrate device configuration in stages. We support the platform in the UK afterwards.

Products

Radiator AAA Server or Radiator Policy Server.

FAQ

Questions people ask

Does Radiator support TACACS+ command authorisation?

Yes. Radiator can authorise individual commands based on the user's role, so a first-line engineer can run show commands while configuration changes require a higher role.

Can we use it with Cisco, Juniper, Arista, Fortinet and others?

Yes. TACACS+ and RADIUS are standard on network equipment from every major vendor, and Radiator is vendor-neutral.

Can it replace Cisco ISE for device administration?

Yes. Device administration is a common reason to move to Radiator, and we migrate the role model as part of the project.

Evaluate Radiator

Thirty days with the real product and a real engineer.