Technical Documentation

Check RADIUS Server Connectivity

Purpose

It is important to check connectivity to the RADIUS server when attempting to diagnose an authentication problem.

Action

To ensure that you can ping the RADIUS server, follow these steps:

  1. In configuration mode, go to the following hierarchy level:
    [edit]user@host# edit system
  2. Determine the IP address of the RADIUS server:
    [edit system]user@host# show

    For example:

    [edit system]user@host# show host-name nut;domain-name englab.company.net;[...Output truncated...]radius-server { 10.10.10.5 { secret "$9$14bhlM-VYJGDX7-w2gUD"; # SECRET-DATA timeout 5; retry 3;} 10.10.10.240 { secret "$9$hMKrMXwYoDik-VwgaJHk"; # SECRET-DATA timeout 5; retry 3;}}[...Output truncated...]
  3. Ping the IP address of the RADIUS server:
    user@host# run ping IP address

    For example:

    user@host# run ping 10.10.10.5 PING 10.10.10.5 (10.10.10.5): 56 data bytes64 bytes from 10.10.10.5: icmp_seq=0 ttl=254 time=0.402 ms64 bytes from 10.10.10.5: icmp_seq=1 ttl=254 time=0.279 ms64 bytes from 10.10.10.5: icmp_seq=2 ttl=254 time=0.292 ms64 bytes from 10.10.10.5: icmp_seq=3 ttl=254 time=0.283 ms64 bytes from 10.10.10.5: icmp_seq=4 ttl=254 time=0.283 ms^C--- 10.10.10.5 ping statistics ---5 packets transmitted, 5 packets received, 0% packet lossround-trip min/avg/max/stddev = 0.271/0.295/0.402/0.036 ms

Meaning

The sample output shows that the RADIUS server is connected and that the connection is running at a reasonable speed.


Published: 2010-01-25