Purpose
It is important to check connectivity to the RADIUS server when attempting to diagnose an authentication problem.
Action
To ensure that you can ping the RADIUS server, follow these steps:
For example:
- [edit system]
- user@host# show
- host-name nut;
- domain-name englab.company.net;
- [...Output truncated...]
- radius-server {
-
- 10.10.10.5 {
- secret "$9$14bhlM-VYJGDX7-w2gUD"; # SECRET-DATA
- timeout 5;
- retry 3;
- }
-
- 10.10.10.240 {
- secret "$9$hMKrMXwYoDik-VwgaJHk"; # SECRET-DATA
- timeout 5;
- retry 3;
- }
- }
- [...Output truncated...]
For example:
- user@host# run ping 10.10.10.5
- PING 10.10.10.5 (10.10.10.5): 56 data bytes
- 64 bytes from 10.10.10.5: icmp_seq=0 ttl=254 time=0.402
ms
- 64 bytes from 10.10.10.5: icmp_seq=1 ttl=254 time=0.279
ms
- 64 bytes from 10.10.10.5: icmp_seq=2 ttl=254 time=0.292
ms
- 64 bytes from 10.10.10.5: icmp_seq=3 ttl=254 time=0.283
ms
- 64 bytes from 10.10.10.5: icmp_seq=4 ttl=254 time=0.283
ms
- ^C
- --- 10.10.10.5 ping statistics ---
- 5 packets transmitted, 5 packets received, 0% packet loss
- round-trip min/avg/max/stddev = 0.271/0.295/0.402/0.036
ms
Meaning
The sample output shows that the RADIUS server is connected and that the connection is running at a reasonable speed.