radclient - A command line tool to send packets to a RADIUS server and show reply.
Command line syntax:
radclient [-c count] [-f file] [-i id] [-n num_requests_per_second] [-p num_requests_in_par-allel] [-r num_retries] [-s] [-t timeout] [-qx] server {acct|auth|status|disconnect} secret
-c count
Send each packet count times.
-f file
File to read the attribute/value pairs from. If this is not specified, they are read from stdin.-i id
Use id as the RADIUS request Id.
-n num_requests_per_second
Send num requests per second, evenly spaced over time. By default (Default value is 0), the requests are sent as fast as possible. This option allows you to slow down the rate at which radclient sends requests.
-p num_requests_in_parallel
Send num requests in parallel, without waiting for a response for each one. By default (Default value is 1),radclient sends the first request listed in a file, waits for the response, and once the response is received,sends the second request. This option allows you to send many requests at a time. Once num_requests_in_parallel are sent, radclient waits for all of the responses to arrive (or for the requests to time out), before sending any more packets.
-r num_retries
Try to send each packet num_retries times, before giving up on it. The default is 3.
-s Print out debug information.
-t timeout
Wait timeout seconds before deciding that the NAS has not responded to a request, and re-sending the
packet. The default timeout is 3.-q Go to quiet mode, and do not print out anything.
-x Print out extra debugging information.
server[:port]
The hostname or IP address of the remote server. Optionally a UDP port can be specified. If no UDP
port is specified, 1813 for accounting packets and 1812 for all other requests.
acct | auth | status | disconnect
Use auth to send an authentication packet (Access-Request), acct to send an accounting packet
(Accounting-Request), status to send an status packet (Status-Server), or disconnect to send a
disconnection request. Instead of these values, you can also use a decimal code here.
code 1 is Access-Request.
code 4 is Accounting-Request.
code 12 is Status-Server
code 40 is Disconnection-Request.
secret The shared secret for this client. It needs to be defined on the radius server side too, for the IP address you are sending the radius packets from.
Example:
1.A sample session that queries the remote server for a PAP Access-Request
"C:\Program
Files\RadUtils\RadiusTest\radclient.exe" -c 1 -f "test.txt" -i 0 -n 0 -p 1 -r 3 -t 3 -sx 192.168.16.100:1812 auth testing123
where attribute/value pairs from test.txt is:
User-Name = "test"
User-Password= "111111"
2.A sample session that queries the remote server for a CHAP Access-Request
"C:\Program
Files\RadUtils\RadiusTest\radclient.exe" -c 1 -f "test.txt" -i 0 -n 0 -p 1 -r 3 -t 3 -sx 192.168.16.100:1812 auth testing123
where attribute/value pairs from test.txt is:
User-Name = "test"
CHAP-Password= "111111"
3.A sample session that queries the remote server for a
PAP Access-Request
"C:\Program Files\RadUtils\RadiusTest\radclient.exe" -c 1
-i 0 -n 0 -p 1 -r 3 -t 3 -sx 192.168.16.100:1812 auth testing123
where attribute/value pairs read from stdin.
After you have input attribute/value pairs, you must input CTRL+Z (standard input EOF) to end the attribute/value pairs input, and press ENTER to run radclient.