# Monitoring RADIUS Services Statistics

#### Purpose

Use to display statistics for RADIUS services.

Use with the optional accounting, authentication, dynamic-request, route-download, or pre-authentication keywords to limit output to the specific type of statistics. Use the optional delta keyword to specify that baselined statistics are to be shown.

#### Action

To display RADIUS authentication and accounting statistics:

    host1#show radius statistics
       RADIUS Authentication Statistics
       --------------------------------
         Statistic        10.10.121.128
    -------------------   -------------
    UDP Port              1812
    Round Trip Time       0
    Access Requests       0
    Rollover Requests     0
    Retransmissions       0
    Access Accepts        0
    Access Rejects        0
    Access Challenges     0
    Malformed Responses   0
    Bad Authenticators    0
    Requests Pending      0
    Request Timeouts      0
    Unknown Responses     0
    Packets Dropped       0

         RADIUS Accounting Statistics
         ----------------------------
         Statistic        10.10.121.128
    -------------------   -------------
    UDP Port              1646
    Round Trip Time       2
    Requests              1
    Start Requests        1
    Interim Requests      0
    Stop Requests         0
    Reject Requests       0
    Rollover Requests     0
    Retransmissions       3
    Responses             1
    Start Responses       1
    Interim Responses     0
    Stop Responses        0
    Reject Responses      0
    Malformed Responses   0
    Bad Authenticators    0
    Requests Pending      0
    Request Timeouts      3
    Unknown Responses     0
    Packets Dropped       0

To display RADIUS pre-authentication statistics:

    host1#show radius pre-authentication statistics

     RADIUS Pre-Authentication Statistics
     ------------------------------------
         Statistic        172.28.30.117
    -------------------   -------------
    UDP Port              1812
    Round Trip Time       0
    Access Requests       2809
    Rollover Requests     0
    Retransmissions       56
    Access Accepts        2809
    Access Rejects        0
    Access Challenges     0
    Malformed Responses   0
    Bad Authenticators    0
    Requests Pending      0
    Request Timeouts      72
    Unknown Responses     0
    Packets Dropped       2

To display RADIUS route-download statistics:

    host1#show radius route-download statistics

     RADIUS Route-Download Statistics
     --------------------------------
         Statistic        192.168.30.16
    -------------------   -------------
    UDP Port              1812
    Round Trip Time       0
    Access Requests       1613
    Rollover Requests     0
    Retransmissions       6
    Access Accepts        1612
    Access Rejects        1
    Access Challenges     0
    Malformed Responses   0
    Bad Authenticators    0
    Requests Pending      0
    Request Timeouts      6
    Unknown Responses     0
    Packets Dropped       5

#### Meaning

Table 29 lists the show radius statistics command output fields.

| Note: All descriptions apply to the primary, secondary, and tertiary RADIUS authentication and accounting servers.

Table 29: show radius statistics Output Fields

Field Name | Field Description
--- | ---
UDP Port | Number of the UDP port of a RADIUS server
Round Trip Time | Hundreds of seconds from request to response
Access Requests | Number of access requests sent to server
Rollover Requests | Number of requests coming into server as a result of the previous server timing out
Retransmissions | Number of retransmissions
Access Accepts | Number of Access-Accepts received from the server
Access Rejects | Number of Access-Rejects received from the server
Access Challenges | Number of access challenges received from the server
Malformed Responses | Number of responses with attributes having an invalid length or unexpected attributes (such as two attributes when the response is required to have at most one)
Bad Authenticators | Number of responses in which the authenticator is incorrect for the matching request. This can occur if the RADIUS secret for the client and server does not match.
Requests Pending | Number of requests waiting for a response
Request Timeouts | Number of requests that timed out
Unknown Responses | Number of unknown responses. The RADIUS response type in the header is invalid or unsupported.
Packets Dropped | Number of packets dropped either because they are too short or the E Series router receives a response for which there is no corresponding request. For example, if the router sends a request and the request times out, the router removes the request from the list and sends a new request. If the server is slow and sends a response to the first request after the router removes the request, the packet is dropped.
Requests | Total number of accounting requests sent, which is the combined total of Start Requests, Interim Requests, Stop Requests, and Reject Requests
Start Requests | Number of accounting start requests sent; includes Acct-On, Acct-Start, Acct-Link-State, and Acct-Tunnel-Start requests
Interim Requests | Number of interim accounting requests
Stop Requests | Number of accounting stop requests sent; includes Acct-Off, Acct-Stop, Acct-Link-Stop, and Acct-Tunnel-Stop requests
Reject Requests | Number of accounting reject requests sent; includes Acct-Link-Reject and Acct-Tunnel-Reject requests
Responses | Number of accounting responses received from the server
Start Responses | Number of accounting start responses received; includes Acct-On, Acct-Start, Acct-Link-Start, and Acct-Tunnel-Start responses
Interim Responses | Number of interim accounting responses
Stop Responses | Number of accounting stop responses received; includes Acct-Off, Acct-Stop, Acct-Link-Stop, and Acct-Tunnel-Stop responses
Reject Responses | Number of accounting reject responses received; includes Acct-Link-Reject and Acct-Tunnel-Reject responses

#### Related Topics

- show radius statistics