Any RADIUS or TACACS+ servers where you DON'T have to enter the IP address of the clients?

We're moving a couple of hundred switches and routers from having local user logins to using AAA and ActiveDirectory-connected-RADIUS or TACACS+ I've got it working fine with our Aruba Clearpass server, but I'd rather not have to enter a couple of hundred 10.x.x.x IP addresses into the server. We're currently using Clearpass, but are there any authentication servers that allow a wildcard client IP address or a subnet to be specified as the client?