Testing the FreeRADIUS 2.x Package onpfSense
- Test Radius Authentication
- Radius Test Rig Utility
- Test Radius Server
- Free Radius Mapping Tool
- Test Radius Powershell
Some authentication devices have RADIUS test tools built into them. Another tool is NTRadPing (Search for NTRadPing.exe) which allows testing from a Windows machine. The nc command may also be used, see below 4. If different ports are used check that any local firewall, such as that on the appliance is not blocking the new assigned ports. Several application tools are available for free to help you test and monitor your Radius Server. These are very useful especially when you need to configure or troubleshoot. Some of these testing and monitoring tools are NTRadPing, RADIUS Test Rig Utility, Radlogin (Included With FreeRADIUS), Radlogin From IEA Software, RadPerf and others. The radtest command provides a simple tool for testing the FreeRADIUS server by querying it directly with requests. RADIUS test client. RADIUS test client is an easy to use tool to simulate, debug and monitor most RADIUS and Network Access Servers (NAS). As a test client simulate RADIUS authentication, accounting and CoA/Disconnect requests for multiple devices and usage scenarios. Radius Test is a server testing tool that can be used by Internet service providers for dial-in user authentication through RADIUS (Remote Authentication Dial In User Service).
Test the FreeRADIUS configuration¶
FreeRADIUS offers an easy to use command line tool to check if theserver is running and listening to incoming requests. An interface,a NAS/Client and a user must all be configured:
- Add a User with the following configuration:
- Username: testuser
- Password: testpassword
- Add a Client/NAS with the following configuration:
- IP-Address: 127.0.0.1
- Shared Secret: testing123
- Add an interface with the following configuration:
- IP-Address: 127.0.0.1
- Interface-Type: Auth
- Port: 1812
- SSH to the pfSense firewall and type in the following on the commandline while FreeRADIUS is running (check before in System Log):
Test Radius Authentication
The following output should appear if everything was setup correctly:
Gm global epc 2011 keygen 1. The really necessary thing is Access-Accept. Check the system logfor the following output:
If something was configured wrong (such as an incorrect username) thenthis will be displayed:
The Accesss-Reject packet is visible, and the system log willcontain the following output:
If the steps above do not work then do not need proceed with any otherconfiguration. This is the first thing that should be tested.
There is a Windows testtool availableas well. Another nice tool is the JRadiusFramework, covered next.
Test FreeRADIUS performance with jRadius¶
jRadius is a tool to test a FreeRADIUS server. It can perform manydifferent request types, numbers of requests, attributes andauthentication methods. It can test how many requests a RADIUS servercan answer at a time, to make sure that it will perform well in aspecific environment. This tool needs a non-windows system with java torun. I tried with openSUSE:
- Download JRadius Minimal (client).
- Unzip the file with the following command:
- Start the application with the following command:
The application window will open. Fill out the fields:
- RADIUS tab
- Transport: UDP
- RADIUS Server: 192.168.0.10
- Shared Secret: mysharedsecret
- Auth Port: 1812
- Acct Port: 1813
- Send Timeout: 10 (or fill in what the NAS offers as timeoutto make test more “real”)
- Send Retries: 0 (or fill in what the NAS offers as timeoutto make test more “real”)
- Requester Threads: 1 (To understand this option think aboutthe number of NAS nodes. Every NAS is a Requester Thread. Inworst case after a power cycle all NAS reboot at once so enterhere the amount of NAS nodes)
- Requests per Thread: 1 (To understand this think about thenumber of hosts which are connected to this NAS at a time and whenthe NAS rebooted all clients will try to reauthenticate)
- Simulation Type: Auth only (if accounting is chosen, thenadditional attributes must be added later)
- Authentication Protocol: PAP (Change it to suit the needs ofthe site but TLS needs a client cert, PEAP users only the servercert from FreeRADIUS)
- Verify Standard: None
- Check Log RADIUS to log tab
- Attributes tab:
- User-Name: myuser
- User-Password: mypass
- NAS-Port: 25 (any value is ok)
- NAS-IP-Address: 192.168.0.111 (IP of the NAS)
- Check all four attributes in AccessReq
- RADIUS tab
- Click Start
Radius Test Rig Utility
Then the test will be performed. It could take some time and the displaywill show the number of requests can be handled per second and theresponse speed. If the server cannot handle the requests fast enoughthen think about increasing FreeRADIUS > Settings, Maximum Numberof Threads. Do not increase this unlimited. It will help on peaks butif there is a high load all the time, think about a faster backend(MySQL instead of flat file). There is also a speed difference if thetestuser in FreeRADIUS > USers is listed at the bottom of a 100users long list or at the top. And there is a difference if there aremany reply attributes like VLAN ID and so on.
After this performance test check the FreeRADIUS server as described inthis chapter: FreeRADIUS 2.x package
Internet Service Providers
AAA for millions of subscribers. Infinitely flexible policy language.
Internet Service Providers
FreeRADIUS authenticates users and tracks accounting data for millions of DSL connections and phones every day.
Enterprise Networks
Global AAA servers. Active Directory integration.
Enterprise Networks
Both wired and wireless 802.1X solutions use RADIUS as the backend. From the smallest business to the largest enterprise, IT managers can be found relying on FreeRADIUS everywhere!
Educational Institutions
Eduroam and WiFi. Tew 2016 crack. With 100K+ students re-authenticating every hour.
Educational Institutions
FreeRADIUS is commonly used in academic wireless networks, especially amongst the eduroam community.
Get started with the world’s most widely deployed RADIUS server:
{{branch.date | date : 'yyyy.MM.dd'}}
Version {{branch.name}} has been released.
{{branch.summary}}.
View full release notesWelcome to the FreeRADIUS project, the open source implementation of RADIUS, an IETF protocol for AAA (Authorisation, Authentication, and Accounting).
The FreeRADIUS project maintains the following components: a multi protocol policy server (radiusd) that implements RADIUS, DHCP, BFD, and ARP; a BSD licensed RADIUS client library; a RADIUS PAM library; and an Apache RADIUS module.
We provide a step-by-step guide to
radiusd -X
. The guide breaks down the different pieces of the debug output, and explains what they mean. Often you can just look for ERROR or WARNING to solve many problems.FreeRADIUS is responsible for authenticating one third of all users on the Internet.
See why we're #1Get involved with The FreeRADIUS Server Project
Our comprehensive support for protocols, data stores, directories, databases, and language integrations would not be possible without contributions from the community. Open your favourite editor and help us make FreeRADIUS better!
Develop new modules
API documentation, C code examples, and anything else you need to get up-to-speed and writing modules for FreeRADIUS.
View coding stylesTest Radius Server
Submit new modules
Developed your own module? Great! Submit your code back to the project and have it maintained by the community.
Visit our GitHub pagePatch issues
Found an issue? We accept patches for everything, from code, to documentation, and even to this website!
How to contributeFree Radius Mapping Tool
Connect with us
Get help, help others, or just say 'Hi!'.Feel free to reach out; we're always happy to receive your feedback.
Need a hand getting started?
Subscribe to our mailing lists to receive the latest FreeRADIUS updates and assistance from members of the FreeRADIUS community.
We are the FreeRADIUS experts.
Test Radius Powershell
Critical deadline? We offer 24/7 commercial support through NetworkRADIUS, the official sponsor of the FreeRADIUS project.