Skip to Main Content
Netreo Ideas Portal
Status Needs review
Created by Glenn Andrews
Created on Jun 22, 2022

Radius login testing

To test for radius login failure by using a client and a service login.

With a radius target server, a service account & password, port, secret and methods does the server return a access-accept ?

Anything but 'access-accept' is a possible incident.

As an example

rad_eapol_test.sh -H "<RADIUS>" -P "1812" -S "<SECRET>" -e "PEAP" -m "WPA-EAP" -u "<USERNAME>" -p "<PASSWORD>"

this returns

access-accept; 0.08 sec |rtt=83ms;;;0;5000 accept=1;0.5:;0:;0;1


for testing, a change to the username/secret or password results in

timeout; 5.01 sec |rtt=5014ms;;;0;5000 accept=1;0.5:;0:;0;1

Netreo Product Area Netreo (IM)
  • Attach files