Troubleshooting the RADIUS server

The tools>perform>security>authentication-server-check command can be used to troubleshoot a RADIUS server by checking the connectivity and functional status of a RADIUS server for subscriber management operations. The command keyword debug can be specified to view more information about the access request. All VSAs sent and received from the RADIUS server, the hex dump, and all other debug information can be shown without the need to turn on system-wide debugging.

Additional attributes in an Access-Request message can be specified in an attribute file referenced with the command keyword attr-from-file file-url. Each attribute must be specified on a separate line in the text file in the following format shown in Table: authentication-server-check attribute file format .

Table: authentication-server-check attribute file format
Attribute file format Description

<type> = <value>

Standard attribute

<vendor>,<type> = <value>

Vendor Specific Attribute

e,<type>,<ext-type> = <value>

Extended type attribute (RFC 6929)

evs, <type>, <vendor>, <vendortype> = <value>

Extended Vendor Specific attribute (RFC 6929)

le,<type>,<ext-type> = <value>

Long Extended type attribute (RFC6929)

evs, <type>, <vendor>, <vendortype> = <value>

Long Extended Vendor Specific attribute (RFC 6929)