Network access control for the whole stack — TACACS+, RADIUS and 802.1X — with a modern web UI.

Taranac is a self-hosted platform for AAA (device administration over TACACS+/RADIUS) and NAC (802.1X port access control). One control plane, a clean admin UI, and the daemons your network already speaks — a free, self-hostable take on heavyweight commercial NAC.

• 🔐 AAA — TACACS+ / RADIUS device administration: command authorization, accounting, per-vendor authorization profiles
• 🛡️ NAC — 802.1X (PEAP / EAP-TLS) and MAB port access control
• 🧩 Policy engine, RBAC, full audit log, MFA (TOTP + push), syslog, backups
• 🌐 Internationalized (i18n) web UI — built for multilingual support, with more languages being added
• 🐳 Ships as Docker images — one install.sh, bring your own TLS certificate

• 📦 Install: https://github.com/TaranacLabs/taranac
• 🖥️ Live demo: https://demo.taranac.pro
• 🌍 Website: https://taranac.pro

Taranac is free to self-host under the Elastic License 2.0 — run it for your own network, commercial use included. Paid options (priority support, HA replication, instant push MFA) keep the project alive.

_{Made by TaranacLabs · Taranac is a trademark of TaranacLabs.}