1RADCLIENT(1) FreeRADIUS Daemon RADCLIENT(1)
2
3
4
6 radclient - send packets to a RADIUS server, show reply
7
9 radclient [-d raddb_directory] [-c count] [-f file] [-i id] [-n
10 num_requests_per_second] [-p num_requests_in_parallel] [-r num_retries]
11 [-s] [-S shared_secret_file] [-t timeout] [-qvx] server {acct|auth|sta‐
12 tus|disconnect} secret
13
15 radclient is a radius client program. It can send arbitrary radius
16 packets to a radius server, then shows the reply. It can be used to
17 test changes you made in the configuration of the radius server, or it
18 can be used to monitor if a radius server is up.
19
20 radclient reads radius attribute/value pairs from it standard input, or
21 from a file specified on the command line. It then encodes these
22 attribute/value pairs using the dictionary, and sends them to the
23 remote server.
24
25 The User-Password and CHAP-Password attributes are automatically
26 encrypted before the packet is sent to the server.
27
28
30 -c count
31 Send each packet count times.
32
33 -d raddb_directory
34 The directory that contains the RADIUS dictionary files.
35 Defaults to /etc/raddb.
36
37 -f file
38 File to read the attribute/value pairs from. If this is not
39 specified, they are read from stdin. This option can be speci‐
40 fied multiple times, in which case packets are sent in order by
41 file, and within each file, by first packet to last packet. A
42 blank line separates logical packets within a file.
43
44 -i id Use id as the RADIUS request Id.
45
46 -n num_requests_per_second
47 Send num_requests_per_second, evenly spaced over time. By
48 default, the requests are sent as fast as possible. This option
49 allows you to slow down the rate at which radclient sends
50 requests.
51
52 -p num_requests_in_parallel
53 Send num_requests_in_parallel, without waiting for a response
54 for each one. By default, radclient sends the first request it
55 has read, waits for the response, and once the response is
56 received, sends the second request in its list. This option
57 allows you to send many requests at simultaneously. Once
58 num_requests_in_parallel are sent, radclient waits for all of
59 the responses to arrive (or for the requests to time out),
60 before sending any more packets.
61
62 -q Go to quiet mode, and do not print out anything.
63
64 -r num_retries
65 Try to send each packet num_retries times, before giving up on
66 it. The default is 10.
67
68 -s Print out some summaries of packets sent and received.
69
70 -S shared_secret_file
71 Rather than reading the shared secret from the command-line
72 (where it can be seen by others on the local system), read it
73 instead from shared_secret_file.
74
75 -t timeout
76 Wait timeout seconds before deciding that the NAS has not
77 responded to a request, and re-sending the packet. The default
78 timeout is 3.
79
80 -v Print out version information.
81
82 -x Print out debugging information.
83
84 server[:port]
85 The hostname or IP address of the remote server. Optionally a
86 UDP port can be specified. If no UDP port is specified, it is
87 looked up in /etc/services. The service name looked for is
88 radacct for accounting packets, and radius for all other
89 requests. If a service is not found in /etc/services, 1813 and
90 1812 are used respectively.
91
92
93 acct | auth | status | disconnect
94 Use auth to send an authentication packet (Access-Request), acct
95 to send an accounting packet (Accounting-Request), status to
96 send an status packet (Status-Server), or disconnect to send a
97 disconnection request. Instead of these values, you can also use
98 a decimal code here. For example, code 12 is also Status-Server.
99
100
101 secret The shared secret for this client. It needs to be defined on
102 the radius server side too, for the IP address you are sending
103 the radius packets from.
104
105
107 A sample session that queries the remote server for Status-Server (not
108 all servers support this, but FreeRADIUS has configurable support for
109 it).
110
111 $ echo "User-Name = fnord" | radclient 192.168.1.42 12 s3cr3t
112 Sending request to server 192.168.1.42, port 1812.
113 radrecv: Packet from host 192.168.1.42 code=2, id=140, length=54
114 Reply-Message = "FreeRADIUS up 21 days, 02:05"
115
116
117
119 radiusd(8),
120
122 Miquel van Smoorenburg, miquels@cistron.nl. Alan DeKok <aland@freera‐
123 dius.org>
124
125
126
127 7 April 2005 RADCLIENT(1)