radtest - send packets to a RADIUS server, show reply
radtest [-d raddb_directory] [-P
tcp/udp] [-t pap/chap/mschap/eap-md5] [-x
] [-4 ] [-6 ] user password
radius-server nas-port-number secret [ppphint]
[nasname]
radtest is a frontend to radclient(1). It generates
a list of attribute/value pairs based on the command line arguments, and
feeds these into radclient. It's a fast and convenient way to test a
radius server.
- -d raddb_directory
- The directory that contains the RADIUS dictionary files. Defaults to
/etc/freeradius/3.0.
- -P proto
- Use proto transport protocol ("tcp" or "udp").
Only available if FreeRADIUS is compiled with TCP transport support.
- -t
pap/chap/mschap/eap-md5
- Choose the authentication method to use. e.g. "-t pap", "-t
chap", "-t mschap", or "-t eap-md5",. Defaults to
"pap". Using EAP-MD5 requires that the "radeapclient"
program is installed.
- -x
- Enables debugging output for the RADIUS client.
- -4
- Use NAS-IP-Address for the NAS address (default)
- -6
- Use NAS-IPv6-Address for the NAS address (default)
- user
- Username to send.
- password
- Password of the user.
- radius-server
- Hostname or IP address of the radius server. Optionally, you may specify a
port by appending :port
- nas-port-number
- The value of the NAS-Port attribute. Is an integer between 0 and 2^31, and
it really doesn't matter what you put here. 10 will do fine.
- secret
- The shared secret for this client.
- ppphint
- If you put an integer > 0 here, radtest (or actually radclient) will
add the attribute Framed-Protocol = PPP to the request packet.
- nasname
- If present, this will be resolved to an IP address and added to the
request packet as the NAS-IP-Address attribute. If you don't
specify it, the local hostname of the system will be used.
Miquel van Smoorenburg, miquels@cistron.nl.