Monitoring RADIUS Services Statistics

Purpose

Use to display statistics for RADIUS services.

Use with the optional accounting, authentication, dynamic-request, route-download, or pre-authentication keywords to limit output to the specific type of statistics. Use the optional delta keyword to specify that baselined statistics are to be shown.

Action

To display RADIUS authentication and accounting statistics:

host1#show radius statistics
   RADIUS Authentication Statistics
   --------------------------------
     Statistic        10.10.121.128
-------------------   -------------
UDP Port              1812
Round Trip Time       0
Access Requests       0
Rollover Requests     0
Retransmissions       0
Access Accepts        0
Access Rejects        0
Access Challenges     0
Malformed Responses   0
Bad Authenticators    0
Requests Pending      0
Request Timeouts      0
Unknown Responses     0
Packets Dropped       0
     RADIUS Accounting Statistics
     ----------------------------
     Statistic        10.10.121.128
-------------------   -------------
UDP Port              1646
Round Trip Time       2
Requests              1
Start Requests        1
Interim Requests      0
Stop Requests         0
Reject Requests       0
Rollover Requests     0
Retransmissions       3
Responses             1
Start Responses       1
Interim Responses     0
Stop Responses        0
Reject Responses      0
Malformed Responses   0
Bad Authenticators    0
Requests Pending      0
Request Timeouts      3
Unknown Responses     0
Packets Dropped       0

To display RADIUS pre-authentication statistics:

host1#show radius pre-authentication statistics
 RADIUS Pre-Authentication Statistics
 ------------------------------------
     Statistic        172.28.30.117
-------------------   -------------
UDP Port              1812
Round Trip Time       0
Access Requests       2809
Rollover Requests     0
Retransmissions       56
Access Accepts        2809
Access Rejects        0
Access Challenges     0
Malformed Responses   0
Bad Authenticators    0
Requests Pending      0
Request Timeouts      72
Unknown Responses     0
Packets Dropped       2

To display RADIUS route-download statistics:

host1#show radius route-download statistics 
 RADIUS Route-Download Statistics  
 --------------------------------  
     Statistic        192.168.30.16
-------------------   -------------
UDP Port              1812         
Round Trip Time       0            
Access Requests       1613         
Rollover Requests     0            
Retransmissions       6            
Access Accepts        1612         
Access Rejects        1            
Access Challenges     0            
Malformed Responses   0            
Bad Authenticators    0            
Requests Pending      0            
Request Timeouts      6            
Unknown Responses     0            
Packets Dropped       5 

Meaning

Table 35 lists the show radius statistics command output fields.

Note: All descriptions apply to the primary, secondary, and tertiary RADIUS authentication and accounting servers.

Table 35: show radius statistics Output Fields

Field Name

Field Description

UDP Port

Number of the UDP port of a RADIUS server

Round Trip Time

Time interval between a request sent to the server and its response received from the server. The interval value is displayed in centiseconds (one-hundredth of a second).

Access Requests

Number of access requests sent to server

Rollover Requests

Number of requests coming into server as a result of the previous server timing out

Retransmissions

Number of retransmissions

Access Accepts

Number of Access-Accepts received from the server

Access Rejects

Number of Access-Rejects received from the server

Access Challenges

Number of access challenges received from the server

Malformed Responses

Number of responses with attributes having an invalid length or unexpected attributes (such as two attributes when the response is required to have at most one)

Bad Authenticators

Number of responses in which the authenticator is incorrect for the matching request. This can occur if the RADIUS secret for the client and server does not match.

Requests Pending

Number of requests waiting for a response

Request Timeouts

Number of requests that timed out

Unknown Responses

Number of unknown responses. The RADIUS response type in the header is invalid or unsupported.

Packets Dropped

Number of packets dropped either because they are too short or the E Series router receives a response for which there is no corresponding request. For example, if the router sends a request and the request times out, the router removes the request from the list and sends a new request. If the server is slow and sends a response to the first request after the router removes the request, the packet is dropped.

Requests

Total number of accounting requests sent, which is the combined total of Start Requests, Interim Requests, Stop Requests, and Reject Requests

Start Requests

Number of accounting start requests sent; includes Acct-On, Acct-Start, Acct-Link-State, and Acct-Tunnel-Start requests

Interim Requests

Number of interim accounting requests

Stop Requests

Number of accounting stop requests sent; includes Acct-Off, Acct-Stop, Acct-Link-Stop, and Acct-Tunnel-Stop requests

Reject Requests

Number of accounting reject requests sent; includes Acct-Link-Reject and Acct-Tunnel-Reject requests

Responses

Number of accounting responses received from the server

Start Responses

Number of accounting start responses received; includes Acct-On, Acct-Start, Acct-Link-Start, and Acct-Tunnel-Start responses

Interim Responses

Number of interim accounting responses

Stop Responses

Number of accounting stop responses received; includes Acct-Off, Acct-Stop, Acct-Link-Stop, and Acct-Tunnel-Stop responses

Reject Responses

Number of accounting reject responses received; includes Acct-Link-Reject and Acct-Tunnel-Reject responses

Related Documentation