How to Test the Radius Interaction and/or Connectivity to Radius Server Before Configuring Session Border Controllers to Use It

Asset ID:	1-71-2153752.1
Update Date:	2017-05-16
Keywords:

Solution Type Technical Instruction Sure

Solution 2153752.1 : How to Test the Radius Interaction and/or Connectivity to Radius Server Before Configuring Session Border Controllers to Use It

Applies to:

Acme Packet 4500 - Version S-Cx6.4.x to S-Cz7.3.5 [Release S-Cx6.0 to S-Cz7.0]
Information in this document applies to any platform.

Goal

When adding new Radius servers to a Production environment using Session Border Controllers (SBC) or Security Gateway (SGw) servers, is there a way to test the Radius interaction and/or connectivity to the new servers before switching ?

Solution

There is not a method to test the Radius interaction (outside configuring the SBC/SGw server to use Radius). It is possible to test the connectivity though.

If this is your goal, please try the following:

NOTE: Radius traffic can only go out the management interface.

From a machine on same network, telnet to the radius server e.g.

telnet 10.13.22.26 1813

and see if radius server is listening by run tcpdump (or other) on radius server.

On the Radius server (or port 1812 for authentication):

# tcpdump -i eth0 port 1813
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
20:14:58.310001 IP cellar.31209 > GW1-142.radius-acct: Flags [S], seq 1989344067, win 14600, options [mss 1460,sackOK,TS val 3203404867 ecr 0,nop,wscale 9], length 0
20:14:58.310024 IP GW1-142.radius-acct > cellar.31209: Flags [R.], seq 0, ack 1989344068, win 0, length 0

20:17:31.906057 IP 10.138.224.71.37197 > GW1-142.radius-acct: Flags [S], seq 2125784995, win 14600, options [mss 1460,sackOK,TS val 620685091 ecr 0,nop,wscale 7], length 0
20:17:31.906100 IP GW1-142.radius-acct > 10.138.224.71.37197: Flags [R.], seq 0, ack 2125784996, win 0, length 0

Attachments

This solution has no attachment