5 Free RADIUS Testing and Monitoring Tools

By Eric Geier (Send Email)
Posted Jun 5, 2011

It's good to have a RADIUS client simulator program during the configuration and troubleshooting of a RADIUS server--whether you're using NPS or IAS on a Windows Server or other AAA server. Although most servers come with their own testing tool, it's always good to have choices.

When troubleshooting a RADIUS server, it's good to have a client simulator program. These five RADIUS testing and monitoring tools can help you test the initial configuration of the server and any changes.

These tools can help you test the initial configuration of the server and when you make changes, and you can experiment with varying client configurations. You might also want a RADIUS monitoring application if you don't have some other network monitoring solution in place.

Here are five RADIUS testing and monitoring tools, all completely free.

Depending on your firewall configuration, you may have to open up UDP ports 1645 and 1646 or 1812 and 1813, depending on which set your server uses.

1. NTRadPing

NTRadPing is a free RADIUS client program offered by MasterSoft, developer of the DialWays server. It's available for Windows as a standalone or portable program that doesn't require installation. It sends packets and displays the replies on the GUI. You can select preconfigured packet types and attributes, or define your own custom ones.

Figure 1

You can quickly input sever, user, packet and attribute details on the GUI. The RADIUS dictionary is defined in an included file and can be customized with vendor specific attributes if needed.

Once everything is set, hit send and you'll see any replies. You can easily save all the settings and load them at a later time.

NTRadPing even has a Help button that provides pertinent info.

2. RADIUS Test Rig Utility

RADIUS Test Rig Utility is a free RADIUS client utility provided by Juniper Networks, an enterprise networking vendor. It is also known simply as RadiusTest. It runs on Windows as a portable program that doesn't require installation. However, it is limited to only sending packets for authentication and accounting (PAP and CHAP).

RADIUS Test Rig Utility
Figure 2
RADIUS Test Rig Utility

You input all the settings via both the configuration file and GUI. Its RADIUS dictionary is loaded with the popular vendor attributes and can be customized if needed.

After hitting Execute, you'll see the status and elapsed time for each packet. You'll also see a run-down of the overall testing statistics. Plus, you can hit the Details button to view status details and packets sent and received.

3. Radlogin (Included With FreeRADIUS)

Radlogin is a free and open source RADIUS client command-line program available in Linux and included with the open source FreeRADIUS project.

Keep in mind, this is a totally different program and project than the one offered by IEA Software and discussed next. It can send packets to a RADIUS server and display the replies at the command-line. You can send authentication, accounting, status, and disconnect packets.

You can pass the desired attributes in the command-line or point to a file. You can also specify the number of times to send the packet, number of retry times, delay between packets and timeout limit. It uses the default dictionaries included with FreeRADIUS.

4. Radlogin From IEA Software

Although it has the same name as the previous program, this is totally different. This Radlogin program is offered free by IEA Software, developer of the RadiusNT and RadiusX servers. It can run on Windows, FreeBSD, Sparc Solaris and Linux platforms.

Alt text
Figure 3
Radlogin from IEA Software

Radlogin can send authentication, accounting, and disconnect requests. But its more advanced than the other programs we've discussed so far. You can send RADIUS queries from the command line, a web-based interface or via the web service API. The dictionary supports more than 70 vendors. It even validates the RADIUS packet decodes. Status and reply details are displayed and stored for later reference.

It can also be used for load testing and even as an automated pinging and monitoring solution with uptime statistics and email/SMS alerts.

You'll find a comprehensive configuration and user PDF manual included with Radlogin.

5. RadPerf

RadPerf is provided free by Network RADIUS SARL, a FreeRADIUS consulting company headed by one of its founders, Alan DeKok. It's a command-based client program designed specifically for load-testing RADIUS servers to see if they're production-ready. It runs on Windows, Mac OS X and Linux.

You can load in a list of users and passwords in a CSV file, so it can generate the authentication and accounting packets at your desired rate. It can help simulate pikes in traffic, long-lived user sessions, and end-to-end user behavior.

After testing, it provide a report comparing the offered and accepted load, and gives the total accepted packets per second.

Eric Geier is the founder of NoWiresSecurity, which helps businesses easily protect their Wi-Fi networks with the Enterprise mode of WPA/WPA2 security. He is also a freelance tech writer--become a Twitter follower or use the RSS Feed to keep up with his writings.

Follow ServerWatch on Twitter

Page 1 of 1

Comment and Contribute

Your name/nickname

Your email

(Maximum characters: 1200). You have characters left.



Thanks for your registration, follow us on our social networks to keep up-to-date