Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Displaying Authentication Statistics

 

Authentication statistics summarize the number of authentication acceptances and rejections, with summary totals for each type of rejection or retry.

To display authentication statistics using the Web GUI:

  1. Select RADIUS Configuration > Statistics > System.

    The System Statistics page (Figure 258) appears.

    Figure 258: System Statistics Page—Authentication
    System Statistics
Page—Authentication
  2. Select the server entry for which you want to view the authentication statistics from the Server list and select Authentication from the View list.

    The System Statistics page (Figure 258) displays authentication statistics for the selected server.

    Table 116 explains the authentication statistics fields and describes possible causes for authentication rejections.

  3. Optionally, select the Auto Refresh (seconds) check box and select a time period for refreshing the display from the drop-down list. Default value is 2 seconds.

    By default, the auto-refresh feature is enabled.

    You can click the Refresh button to refresh the display.

  4. Optionally, click Clear All Statistics to clear all authentication statistics.

Note

SBR Carrier calculates the rate of authentication requests as they are received from the socket and displays all the incoming requests from the client in the Authentication Request statistics. Other statistics information such as Rejects are measured as the incoming requests are processed. If a request is not processed immediately and is handled by the flood queue, the processing is delayed and this is reflected in the Authentication statistics for that time period.

Table 116: Authentication Statistics

Authentication Statistic

Meaning

Authentication

 

Accepts

The current, average, and peak number of RADIUS transactions that resulted in an accept response.

Rejects

The current, average, and peak number of RADIUS transactions that resulted in a reject response. These are detailed in the Reject Details section.

Challenges Sent

The number of challenges sent.

Silent Discards

The number of discarded authentication requests. Requests can be discarded due to unknown clients or other factors, such as inability to assign resources, if so configured. The clients cannot not be identified if a RADIUS client entry cannot be found for a device with the name or IP address of a device requesting authentication services.

Total Transactions

The sum of accept, reject, and silent discard totals.

Reject Details

 

Dropped Packet

The number of RADIUS authentication packets dropped by Steel-Belted Radius Carrier because the server was flooded with more packets than it was able to handle.

Invalid Request

The number of invalid RADIUS requests made.

Invalid requests can be a result of a device sending incorrectly formed packets to Steel-Belted Radius Carrier because it is configured incorrectly, or because the device does not conform to the RADIUS standard.

Failed Authentication

The number of failed authentication requests, where the failure is due to invalid username or password.

If all transactions are failing authentication, the problem might be that the shared secret entered into Steel-Belted Radius Carrier does not match the shared secret entered on the client device.

Failed on CheckList

The number of requests that were authenticated but failed to meet the check list requirements.

Insufficient Resources

The number of rejects due to a server resource problem.

Proxy Failure

The number of rejects that had to be issued because Proxy forwarding to another RADIUS server failed.

Rejected by Proxy

The number of rejects due to receiving a reject response from a proxy RADIUS target server.

Retries Received

 

Transactions Retried

The number of requests for which one or more duplicates was received.

Total Retry Packets

The number of duplicate packets received.