Check RADIUS Server Connectivity
Purpose
It is important to check connectivity to the RADIUS server when attempting to diagnose an authentication problem.
Action
To ensure that you can ping the RADIUS server, follow these steps:
- In configuration mode, go to the following hierarchy level:[edit]user@host# edit system
- Determine the IP address of the RADIUS server:[edit system]user@host# show
For example:
[edit system]user@host# show host-name nut;domain-name englab.company.net;[...Output truncated...]radius-server { 10.10.10.5 { secret "$9$14bhlM-VYJGDX7-w2gUD"; # SECRET-DATA timeout 5; retry 3;} 10.10.10.240 { secret "$9$hMKrMXwYoDik-VwgaJHk"; # SECRET-DATA timeout 5; retry 3;}}[...Output truncated...] - Ping the IP address of the RADIUS server:user@host# run ping IP address
For example:
user@host# run ping 10.10.10.5 PING 10.10.10.5 (10.10.10.5): 56 data bytes64 bytes from 10.10.10.5: icmp_seq=0 ttl=254 time=0.402 ms64 bytes from 10.10.10.5: icmp_seq=1 ttl=254 time=0.279 ms64 bytes from 10.10.10.5: icmp_seq=2 ttl=254 time=0.292 ms64 bytes from 10.10.10.5: icmp_seq=3 ttl=254 time=0.283 ms64 bytes from 10.10.10.5: icmp_seq=4 ttl=254 time=0.283 ms^C--- 10.10.10.5 ping statistics ---5 packets transmitted, 5 packets received, 0% packet lossround-trip min/avg/max/stddev = 0.271/0.295/0.402/0.036 ms
Meaning
The sample output shows that the RADIUS server is connected and that the connection is running at a reasonable speed.