1RADCLIENT(1)                   FreeRADIUS Daemon                  RADCLIENT(1)
2
3
4

NAME

6       radclient - send packets to a RADIUS server, show reply
7

SYNOPSIS

9       radclient  [-d  raddb_directory]  [-c  count]  [-f  file]  [-i  id] [-n
10       num_requests_per_second] [-p num_requests_in_parallel] [-r num_retries]
11       [-s] [-S shared_secret_file] [-t timeout] [-qvx] server {acct|auth|sta‐
12       tus|disconnect} secret
13

DESCRIPTION

15       radclient is a radius client program.  It  can  send  arbitrary  radius
16       packets  to  a  radius  server, then shows the reply. It can be used to
17       test changes you made in the configuration of the radius server, or  it
18       can be used to monitor if a radius server is up.
19
20       radclient reads radius attribute/value pairs from it standard input, or
21       from a file specified on  the  command  line.  It  then  encodes  these
22       attribute/value  pairs  using  the  dictionary,  and  sends them to the
23       remote server.
24
25       The  User-Password  and  CHAP-Password  attributes  are   automatically
26       encrypted before the packet is sent to the server.
27
28

OPTIONS

30       -c count
31              Send each packet count times.
32
33       -d raddb_directory
34              The   directory  that  contains  the  RADIUS  dictionary  files.
35              Defaults to /etc/raddb.
36
37       -f file
38              File to read the attribute/value pairs  from.  If  this  is  not
39              specified,  they are read from stdin.  This option can be speci‐
40              fied multiple times, in which case packets are sent in order  by
41              file,  and  within each file, by first packet to last packet.  A
42              blank line separates logical packets within a file.
43
44       -i id  Use id as the RADIUS request Id.
45
46       -n num_requests_per_second
47              Send  num_requests_per_second,  evenly  spaced  over  time.   By
48              default, the requests are sent as fast as possible.  This option
49              allows you to slow  down  the  rate  at  which  radclient  sends
50              requests.
51
52       -p num_requests_in_parallel
53              Send  num_requests_in_parallel,  without  waiting for a response
54              for each one.  By default, radclient sends the first request  it
55              has  read,  waits  for  the  response,  and once the response is
56              received, sends the second request in  its  list.   This  option
57              allows  you  to  send  many  requests  at  simultaneously.  Once
58              num_requests_in_parallel are sent, radclient waits  for  all  of
59              the  responses  to  arrive  (or  for  the requests to time out),
60              before sending any more packets.
61
62       -q     Go to quiet mode, and do not print out anything.
63
64       -r num_retries
65              Try to send each packet num_retries times, before giving  up  on
66              it.  The default is 10.
67
68       -s     Print out some summaries of packets sent and received.
69
70       -S shared_secret_file
71              Rather  than  reading  the  shared  secret from the command-line
72              (where it can be seen by others on the local  system),  read  it
73              instead from shared_secret_file.
74
75       -t timeout
76              Wait  timeout  seconds  before  deciding  that  the  NAS has not
77              responded to a request, and re-sending the packet.  The  default
78              timeout is 3.
79
80       -v     Print out version information.
81
82       -x     Print out debugging information.
83
84       server[:port]
85              The  hostname  or  IP address of the remote server. Optionally a
86              UDP port can be specified. If no UDP port is  specified,  it  is
87              looked  up  in  /etc/services.  The  service  name looked for is
88              radacct  for  accounting  packets,  and  radius  for  all  other
89              requests.  If  a service is not found in /etc/services, 1813 and
90              1812 are used respectively.
91
92
93       acct | auth | status | disconnect
94              Use auth to send an authentication packet (Access-Request), acct
95              to  send  an  accounting  packet (Accounting-Request), status to
96              send an status packet (Status-Server), or disconnect to  send  a
97              disconnection request. Instead of these values, you can also use
98              a decimal code here. For example, code 12 is also Status-Server.
99
100
101       secret The shared secret for this client.  It needs to  be  defined  on
102              the  radius  server side too, for the IP address you are sending
103              the radius packets from.
104
105

EXAMPLE

107       A sample session that queries the remote server for Status-Server  (not
108       all  servers  support this, but FreeRADIUS has configurable support for
109       it).
110
111              $ echo "User-Name = fnord" | radclient 192.168.1.42 12 s3cr3t
112              Sending request to server 192.168.1.42, port 1812.
113              radrecv: Packet from host 192.168.1.42 code=2, id=140, length=54
114                  Reply-Message = "FreeRADIUS up 21 days, 02:05"
115
116
117

SEE ALSO

119       radiusd(8),
120

AUTHORS

122       Miquel van Smoorenburg, miquels@cistron.nl.  Alan DeKok  <aland@freera‐
123       dius.org>
124
125
126
127                                 7 April 2005                     RADCLIENT(1)
Impressum