Documentation

Taranac is one policy core for TACACS+, RADIUS and 802.1X — device administration (AAA) and 802.1X network access (NAC) on a single source of truth, with device discovery and profiling, configuration tracking and reporting built on the same core. These docs cover installing, configuring and operating it.

• Getting started — what Taranac is, architecture, install (or the ready-made virtual appliance), first run.
• Hands-on guides — end-to-end walkthroughs on real gear: an 802.1X lab, PEAP, EAP-TLS, machine authentication, EAP-TTLS.
• Identity & access — users & groups, LDAP directories (Active Directory, OpenLDAP, FreeIPA, Google Workspace), roles & permissions, MFA.
• Device administration — TACACS+ & RADIUS, network devices, AAA policy, logging & accounting.
• Network access control — 802.1X, endpoints, NAC policy, captive portal, PKI, certificate revocation and device enrollment over EST and SCEP.
• Discovery & profiling — how Taranac learns what each endpoint is: DHCP Probe, scanner, SNMP, Web Probe, the OUI database, and the Device Profiling tree that endpoint groups and NAC policy act on.
• Device configuration — the other side of the wire: what you type on Cisco IOS/IOS-XE, Huawei VRP, Arista EOS, Fortinet FortiGate and MikroTik RouterOS.
• Configuration tracker — collect, version and diff device configurations; transports, credentials, drift and change alerts.
• Reports — templates, datasets and reports over AAA, NAC, configuration and audit data, with exports and scheduled delivery.
• Operations — audit & syslog, alerts, collectors, IPv6, backup & upgrades, high availability, diagnostic bundles, licensing, troubleshooting.
• Reference — settings, CLI & scripts, versioning & releases, the API.

Alongside them sits the Roadmap — the one page that spans every section.