Check RADIUS Server Connectivity

Purpose

It is important to check connectivity to the RADIUS server when attempting to diagnose an authentication problem.

Action

To ensure that you can ping the RADIUS server, follow these steps:

1. In configuration mode, go to the following hierarchy level:

[edit]

user@host# edit system

2. Determine the IP address of the RADIUS server:

[edit system]

user@host# show

For example:

[edit system]

user@host# show 

host-name nut;

domain-name englab.company.net;

[...Output truncated...]

radius-server {     

    10.10.10.5 {

        secret "$9$14bhlM-VYJGDX7-w2gUD"; # SECRET-DATA

        timeout 5;

        retry 3;

    }

    10.10.10.240 {

        secret "$9$hMKrMXwYoDik-VwgaJHk"; # SECRET-DATA

        timeout 5;

        retry 3;

    }

}

[...Output truncated...]

3. Ping the IP address of the RADIUS server:

user@host# run ping IP address

For example:

user@host# run ping 10.10.10.5                      

PING 10.10.10.5 (10.10.10.5): 56 data bytes

64 bytes from 10.10.10.5: icmp_seq=0 ttl=254 time=0.402 ms

64 bytes from 10.10.10.5: icmp_seq=1 ttl=254 time=0.279 ms

64 bytes from 10.10.10.5: icmp_seq=2 ttl=254 time=0.292 ms

64 bytes from 10.10.10.5: icmp_seq=3 ttl=254 time=0.283 ms

64 bytes from 10.10.10.5: icmp_seq=4 ttl=254 time=0.283 ms

^C

--- 10.10.10.5 ping statistics ---

5 packets transmitted, 5 packets received, 0% packet loss

round-trip min/avg/max/stddev = 0.271/0.295/0.402/0.036 ms

What It Means

The sample output shows that the RADIUS server is connected and that the connection is running at a reasonable speed.