display radius-server packet

Function

The display radius-server packet command displays statistics about packets on the RADIUS server with a specified IP address.

Format

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display radius-server packet ipv6-address ipv6-address [ integer-value ] { accounting | authentication }

display radius-server packet ip-address ip-address [ vpn-instance string ] [ integer-value ] { accounting | authentication }

For NetEngine 8000 F1A:

display radius-server packet ip-address ip-address [ vpn-instance string ] { coa | dm }

Parameters

Parameter	Description	Value
ipv6-address ipv6-address	Specifies the IPv6 address of the RADIUS server.	The value is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X.
integer-value	Specifies the interface number of the RADIUS server.	The value is an integer ranging from 1 to 65535.
accounting	Displays the statistics of packets on the RADIUS accounting server.	-
authentication	Displays the statistics of packets on the RADIUS authentication server.	-
ip-address ip-address	Specifies the IPv4 address of the RADIUS server.	The value is in dotted decimal notation.
vpn-instance string	Specifies the VPN instance that the RADIUS server belongs to.	The value is a string of 1 to 31 characters.
coa	Displays the statistics of CoA packets on the RADIUS authentication server.	-
dm	Displays the statistics of DM packets on the RADIUS authentication server.	-

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
radius	read

Usage Guidelines

Usage Scenario

The display radius-server packet command can be used to display the number of packets transmitted between the device and the RADIUS server.

In VS mode, this command is supported only by the admin VS.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display statistics about authentication packets on the RADIUS server with the IP address of 172.16.1.2.

<HUAWEI> display radius-server packet ip-address 172.16.1.2 authentication
Total radius server authentication packets: 
  Access Requests    : 0          Access Retransmissions     : 0      
  Access Accepts     : 0          Access Rejects             : 0      
  Access Challenges  : 0          Malformed Access Responses : 0      
  Bad Authenticators : 0          Pending Requests           : 0      
  Timeouts           : 20               
   Speed Limit Block : 0          Pending Limit Block        : 0     
   Server Down Block : 0          No Source IP Block         : 0      
   Server Not Reply  : 20               
  Unknown Types      : 0          Packets Dropped            : 0 
  Cancelled Request  : 0
Last 30 minutes radius server authentication packets: 
  Access Requests    : 0          Access Retransmissions     : 0      
  Access Accepts     : 0          Access Rejects             : 0      
  Access Challenges  : 0          Malformed Access Responses : 0      
  Bad Authenticators : 0          Pending Requests           : 0      
  Timeouts           : 20               
   Speed Limit Block : 0          Pending Limit Block        : 0      
   Server Down Block : 0          No Source IP Block         : 0      
   Server Not Reply  : 20               
  Unknown Types      : 0          Packets Dropped            : 0 
  Cancelled Request  : 0

# Display statistics about accounting packets on the RADIUS server with the IP address of 172.16.1.2.

<HUAWEI> display radius-server packet ip-address 172.16.1.2 accounting
Total radius server accounting packets: 
  Account Requests   : 1          Account Retransmissions     : 19      
  Account Responses  : 0          Malformed Account Responses : 0      
  Bad Authenticators : 0          Pending Requests            : 0      
  Timeouts           : 20              
   Speed Limit Block : 0          Pending Limit Block         : 0        
   Server Down Block : 0          No Source IP Block          : 0      
   Server Not Reply  : 20              
  Unknown Types      : 0          Packets Dropped             : 0 
  Cancelled Request  : 0
Last 30 minutes radius server accounting packets: 
  Account Requests   : 0          Account Retransmissions     : 0      
  Account Responses  : 0          Malformed Account Responses : 0      
  Bad Authenticators : 0          Pending Requests            : 0      
  Timeouts           : 20               
   Speed Limit Block : 0          Pending Limit Block         : 0      
   Server Down Block : 0          No Source IP Block          : 0      
   Server Not Reply  : 20               
  Unknown Types      : 0          Packets Dropped             : 0  
  Cancelled Request  : 0

# Display the statistics of authorization packets on the RADIUS server with the IP address 172.16.2.3.

<HUAWEI> display radius-server packet ip-address 172.16.2.3 dm
Total radius server DM packets:
  Author Requests    : 0          Author Retransmissions      : 0
  Author Acks        : 0          Author Naks                 : 0
  Bad Authenticators : 0          Author Malformeds           : 0
  Timeouts           : 0          Unknown Types               : 0
  Packets Dropped    : 0
Last 30 minutes radius server DM packets:
  Author Requests    : 0          Author Retransmissions      : 0
  Author Acks        : 0          Author Naks                 : 0
  Bad Authenticators : 0          Author Malformeds           : 0
  Timeouts           : 0          Unknown Types               : 0
  Packets Dropped    : 0

**Table 1** Description of the **display radius-server packet** command output
Item	Description
Total radius server accounting packets	Statistics about the accounting packets received and sent by the RADIUS server.
Total radius server authentication packets	Statistics about the authentication packets of the RADIUS server.
Total radius server DM packets	Statistics about the DM authorization packets of the RADIUS server.
Access Requests	Number of authentication request packets. The number of pending requests increases with the number of authentication request packets. If version2 is specified in the radius-server packet statistics algorithm command, Access Requests indicates the sum number of authentication request packets and retransmitted authentication request packets.
Access Retransmissions	Number of times that authentication packets are retransmitted. If a packet is not sent to the server for the first time, the number of retransmissions will increase. The number of retransmissions and the number of access requests are mutually exclusive.
Access Accepts	Number of authentication accept packets. If the server sends an authentication success packet, the number of authentication accept packets will increase. The values of the Access Accepts, Access Rejects, and Access Challenges fields are mutually exclusive. If version2 is specified in the radius-server packet statistics algorithm command, Access Accepts indicates the sum number of all authentication response packets, including authentication success, failure, and challenge packets and incorrect response packets.
Access Rejects	Number of authentication reject packets. If the uccode field in the response packet sent by the server shows that the authentication request is rejected, the number of authentication reject packets will increase.
Access Challenges	Number of authentication challenge packets. If the message code sent by the server indicates authentication negotiation, the number of authentication challenge packets increases.
Malformed Access Responses	Number of incorrect access response packets.
Malformed Account Responses	Number of incorrect accounting response packets.
Bad Authenticators	Number of packets with incorrect authenticators. Therefore, it is a sub-option of Malformed Access Responses.
Pending Requests	Number of request packets that are sent to the server but are not responded and have not timed out.
Pending Limit Block	Number of packets retransmitted due to the pending limit.
Timeouts	Number of timeout accounting packets. The following number of timeout authentication packets is accumulated: Number of packets retransmitted due to the limit on the traffic rate of users. Number of packets retransmitted due to the pending limit. Number of packets retransmitted to the RADIUS server because the server is Down. Number of packets retransmitted to the RADIUS server because the IP address from the NetEngine 8000 F to the server is unreachable. Number of the packets received but not acknowledged by the RADIUS server.
Speed Limit Block	Number of packets retransmitted due to the limit on the traffic rate of users.
Server Down Block	Number of packets resent to the RADIUS server because the RADIUS server is Down.
Server Not Reply	Number of packets that are sent to the RADIUS server and are not replied to.
No Source IP Block	Number of packets resent to the RADIUS server because the IP address from the device to the RADIUS server is unreachable.
Unknown Types	Number of packets which the packet type is not defined in the standard.
Packets Dropped	Number of discarded authentication packets. An incorrect authenticated packet will be also dropped and increases timeouts counter because of no correct response packet. The Packets Dropped field value increases with the Malformed Access Responses field value. If the error type is MD5 authentication key error, the Bad Authenticators field value will increase. Discarded packets include packets with incorrect lengths, Packets not in response to previous requests, packets carrying incorrect MD5 authentication keys, packets of unsupported types, packets of which the contents cannot be found, and packets carrying incorrect socket indexes or incorrect server port IDs. The encryption algorithm used for MD5 authentication poses security risks.
Cancelled Request	Number of request packets or retransmitted packets that became invalid due to user logouts.
Last 30 minutes radius server authentication packets	Statistics about the authentication packets of the RADIUS authentication server in the last 30 minutes, and the statistics are updated every five minutes. The default value is 30 minutes, and cannot be changed.
Last 30 minutes radius server accounting packets	Statistics about the accounting packets of the RADIUS accounting server in the last 30 minutes, and the statistics are updated every five minutes. The default value is 30 minutes, and cannot be changed.
Last 30 minutes radius server DM packets	Statistics about the DM authorization packets of the RADIUS server within the last 30 minutes. Statistics collection is updated every 5 minutes. The default statistics collection time of the system is 30 minutes and cannot be modified.
Account Requests	Number of accounting request packets.
Account Retransmissions	Number of accounting packets that are retransmitted.
Account Responses	Number of accounting response packets.
Author Requests	Indicates the number of authorization request packets.
Author Retransmissions	Number of retransmitted authorization packets.
Author Acks	Number of authorization accept packets.
Author Naks	Number of authorization reject packets.
Author Malformeds	Number of incorrect authorization packets.