Monitoring RADIUS Services Statistics

Purpose

Use to display statistics for RADIUS services.

Use with the optional accounting, authentication, dynamic-request, route-download, or pre-authentication keywords to limit output to the specific type of statistics. Use the optional delta keyword to specify that baselined statistics are to be shown.

Action

To display RADIUS authentication and accounting statistics:

host1#show radius statistics
   RADIUS Authentication Statistics
   --------------------------------
     Statistic        10.10.121.128
-------------------   -------------
UDP Port              1812
Round Trip Time       0
Access Requests       0
Rollover Requests     0
Retransmissions       0
Access Accepts        0
Access Rejects        0
Access Challenges     0
Malformed Responses   0
Bad Authenticators    0
Requests Pending      0
Request Timeouts      0
Unknown Responses     0
Packets Dropped       0

     RADIUS Accounting Statistics
     ----------------------------
     Statistic        10.10.121.128
-------------------   -------------
UDP Port              1646
Round Trip Time       2
Requests              1
Start Requests        1
Interim Requests      0
Stop Requests         0
Reject Requests       0
Rollover Requests     0
Retransmissions       3
Responses             1
Start Responses       1
Interim Responses     0
Stop Responses        0
Reject Responses      0
Malformed Responses   0
Bad Authenticators    0
Requests Pending      0
Request Timeouts      3
Unknown Responses     0
Packets Dropped       0

To display RADIUS pre-authentication statistics:

host1#show radius pre-authentication statistics

 RADIUS Pre-Authentication Statistics
 ------------------------------------
     Statistic        172.28.30.117
-------------------   -------------
UDP Port              1812
Round Trip Time       0
Access Requests       2809
Rollover Requests     0
Retransmissions       56
Access Accepts        2809
Access Rejects        0
Access Challenges     0
Malformed Responses   0
Bad Authenticators    0
Requests Pending      0
Request Timeouts      72
Unknown Responses     0
Packets Dropped       2

To display RADIUS route-download statistics:

host1#show radius route-download statistics

 RADIUS Route-Download Statistics  
 --------------------------------  
     Statistic        192.168.30.16
-------------------   -------------
UDP Port              1812         
Round Trip Time       0            
Access Requests       1613         
Rollover Requests     0            
Retransmissions       6            
Access Accepts        1612         
Access Rejects        1            
Access Challenges     0            
Malformed Responses   0            
Bad Authenticators    0            
Requests Pending      0            
Request Timeouts      6            
Unknown Responses     0            
Packets Dropped       5

Meaning

Table 31 lists the show radius statistics command output fields.

Note: All descriptions apply to the primary, secondary, and tertiary RADIUS authentication and accounting servers.

Table 31: show radius statistics Output Fields

Field Name	Field Description
UDP Port	Number of the UDP port of a RADIUS server
Round Trip Time	Time interval between a request sent to the server and its response received from the server. The interval value is displayed in centiseconds (one-hundredth of a second).
Access Requests	Number of access requests sent to server
Rollover Requests	Number of requests coming into server as a result of the previous server timing out
Retransmissions	Number of retransmissions
Access Accepts	Number of Access-Accepts received from the server
Access Rejects	Number of Access-Rejects received from the server
Access Challenges	Number of access challenges received from the server
Malformed Responses	Number of responses with attributes having an invalid length or unexpected attributes (such as two attributes when the response is required to have at most one)
Bad Authenticators	Number of responses in which the authenticator is incorrect for the matching request. This can occur if the RADIUS secret for the client and server does not match.
Requests Pending	Number of requests waiting for a response
Request Timeouts	Number of requests that timed out
Unknown Responses	Number of unknown responses. The RADIUS response type in the header is invalid or unsupported.
Packets Dropped	Number of packets dropped either because they are too short or the E Series router receives a response for which there is no corresponding request. For example, if the router sends a request and the request times out, the router removes the request from the list and sends a new request. If the server is slow and sends a response to the first request after the router removes the request, the packet is dropped.
Requests	Total number of accounting requests sent, which is the combined total of Start Requests, Interim Requests, Stop Requests, and Reject Requests
Start Requests	Number of accounting start requests sent; includes Acct-On, Acct-Start, Acct-Link-State, and Acct-Tunnel-Start requests
Interim Requests	Number of interim accounting requests
Stop Requests	Number of accounting stop requests sent; includes Acct-Off, Acct-Stop, Acct-Link-Stop, and Acct-Tunnel-Stop requests
Reject Requests	Number of accounting reject requests sent; includes Acct-Link-Reject and Acct-Tunnel-Reject requests
Responses	Number of accounting responses received from the server
Start Responses	Number of accounting start responses received; includes Acct-On, Acct-Start, Acct-Link-Start, and Acct-Tunnel-Start responses
Interim Responses	Number of interim accounting responses
Stop Responses	Number of accounting stop responses received; includes Acct-Off, Acct-Stop, Acct-Link-Stop, and Acct-Tunnel-Stop responses
Reject Responses	Number of accounting reject responses received; includes Acct-Link-Reject and Acct-Tunnel-Reject responses

Monitoring RADIUS Services Statistics

Purpose

Action

Meaning

Related Documentation