Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

test aaa authd-lite user

 

Syntax

Release Information

Command introduced in Junos OS Release 11.2.

Command introduced in Junos OS Release 15.1X49-D10 for SRX Series devices.

Description

Verify authd-lite subscriber access authentication, accounting, and address allocation configuration.

The test aaa command supports all RADIUS-sourced attributes, both IETF standard attributes and Juniper Networks VSAs. Received attributes are displayed in the output. For information about standard RADIUS attributes, see RADIUS IETF Attributes Supported by the AAA Service Framework. For information about Juniper Networks VSAs, see Juniper Networks VSAs Supported by the AAA Service Framework.

Starting in Junos OS Release 19.3R1, the XML output format has changed. Each RADIUS server attribute name has an associated attribute value. Each of these pairs is now enclosed by the <radius-server-data> tag. The new tag makes it easier to recognize the name/value pairs, both for operators and API clients. You may have to change any scripts that use the XML output to work properly with the new format.

Options

usernameSpecify the subscriber username to test.
password passwordSpecify the password associated with the username.
profile access-profile-nameSpecify the access profile associated with the subscriber.
port nas-port(Optional) Specify the NAS port used for the test.
zero-stats(Optional) Specify that no accounting statistics are set for this test.

Required Privilege Level

view

List of Sample Output

test aaa authd-lite user

test aaa authd-lite user (XML Output, Old Format)

test aaa authd-lite user (XML Output, New Format)

Output Fields

When you enter this command, you are provided feedback on the status of your request. For information about output fields related to authentication, accounting, and subscriber-specific information, see the show network-access aaa statistics, show network-access aaa statistics authentication, show network-access aaa subscribers, and show subscribers commands.

The test command does not support volume-time accounting. If volume-time accounting is configured for the test subscriber, the test command replaces the statistics with time-only accounting statistics.

This command displays only attributes that are supported by Junos OS; these attributes appear even when their values are not set. The Virtual Router Name (LS:RI) field matches the Juniper Networks Virtual-Router VSA (26-1), if present; otherwise the field displays default:default. The displayed value for all other attributes that are not received is <not set>.

Sample Output

test aaa authd-lite user

The following example tests the configuration for authd-lite subscriber user1bt with a password of $ABC123 and an access profile of employee12, and displays the resulting output:

user@host> test aaa authd-lite user user1bt password $ABC123 profile employee12

test aaa authd-lite user (XML Output, Old Format)

The following example shows an excerpt of sample XML output in the old format:

user@host>test aaa authd-lite user user45@test.net password $ABC123 profile test | display xml

test aaa authd-lite user (XML Output, New Format)

The following example shows an excerpt of sample XML output in the new format:

user@host>test aaa authd-lite user user45@test.net password $ABC123 | display xml