Displaying Authentication Statistics
Authentication statistics summarize the number of authentication acceptances and rejections, with summary totals for each type of rejection or retry.
To display authentication statistics using the Web GUI:
Select RADIUS Configuration > Statistics > System.
The System Statistics page (Figure 258) appears.
Select the server entry for which you want to view the authentication statistics from the Server list and select Authentication from the View list.
The System Statistics page (Figure 258) displays authentication statistics for the selected server.
Table 116 explains the authentication statistics fields and describes possible causes for authentication rejections.
Optionally, select the Auto Refresh (seconds) check box and select a time period for refreshing the display from the drop-down list. Default value is 2 seconds.
By default, the auto-refresh feature is enabled.
You can click the Refresh button to refresh the display.
Optionally, click Clear All Statistics to clear all authentication statistics.
SBR Carrier calculates the rate of authentication requests as they are received from the socket and displays all the incoming requests from the client in the Authentication Request statistics. Other statistics information such as Rejects are measured as the incoming requests are processed. If a request is not processed immediately and is handled by the flood queue, the processing is delayed and this is reflected in the Authentication statistics for that time period.
Table 116: Authentication Statistics
The current, average, and peak number of RADIUS transactions that resulted in an accept response.
The current, average, and peak number of RADIUS transactions that resulted in a reject response. These are detailed in the Reject Details section.
The number of challenges sent.
The number of discarded authentication requests. Requests can be discarded due to unknown clients or other factors, such as inability to assign resources, if so configured. The clients cannot not be identified if a RADIUS client entry cannot be found for a device with the name or IP address of a device requesting authentication services.
The sum of accept, reject, and silent discard totals.
The number of RADIUS authentication packets dropped by Steel-Belted Radius Carrier because the server was flooded with more packets than it was able to handle.
The number of invalid RADIUS requests made.
Invalid requests can be a result of a device sending incorrectly formed packets to Steel-Belted Radius Carrier because it is configured incorrectly, or because the device does not conform to the RADIUS standard.
The number of failed authentication requests, where the failure is due to invalid username or password.
If all transactions are failing authentication, the problem might be that the shared secret entered into Steel-Belted Radius Carrier does not match the shared secret entered on the client device.
Failed on CheckList
The number of requests that were authenticated but failed to meet the check list requirements.
The number of rejects due to a server resource problem.
The number of rejects that had to be issued because Proxy forwarding to another RADIUS server failed.
Rejected by Proxy
The number of rejects due to receiving a reject response from a proxy RADIUS target server.
The number of requests for which one or more duplicates was received.
Total Retry Packets
The number of duplicate packets received.