Verifying the RADIUS Configuration

You can verify the server configurations, RADIUS attributes supported by the system, and statistics on RADIUS packets.

Prerequisites

The RADIUS server group function has been configured.

Procedure

  • Run the display radius-server authorization configuration command to check the configuration of a RADIUS authorization server.
  • Run the display radius-server configuration [ group groupname ] command to check the configuration of a RADIUS server group.

    Configuring the ui-mode type1 command in the system view influences the output format of the display command.

  • Run the display radius-attribute [ name attribute-name | { type { 3gpp | cmcc | dsl | huawei | microsoft | redback | standard | cisco } attribute-number ] command to check the RADIUS attributes supported by the system.
  • Run the display radius-attribute [ server-group server-group-name packet { access-request | access-accept | access-reject | accounting-request | accounting-response | coa-request | coa-ack | coa-nak | dm-request | dm-ack | dm-nak | accounting-on | accounting-off } ] command to check attributes carried in packets sent by a RADIUS server group.
  • Run the display radius-server packet { ip-address | ipv6-address } ip-address [ vpn-instance vpn-instance ] { accounting | authentication | coa | dm } command to check statistics about packets on the RADIUS server of a specified IP address.
  • Run the display radius-attribute packet-count command to check the number of times an attribute appears in a RADIUS packet.
  • Run the display radius-client statistics client-ip client-ip-address [ vpn-instance vpn-instance-name ] command to check statistics about RADIUS packets exchanged between the RADIUS client and proxy.
  • Run the display aaa remote-download acl item [ user-id user-id | classifier classifier-name ] * [ verbose ] command to check information about traffic classifier-behavior pairs in dynamic ACLs delivered by a RADIUS server.
  • Run the display aaa remote-download acl statistics classifier classifier-name [ slot slot-id ] command to check statistics about traffic classifier-behavior pairs in dynamic ACLs delivered by a RADIUS server on a specific board.
  • Run the display cpu-defend whitelist session-car radius statistics slot slot-id command to check information about CAR for whitelisted RADIUS sessions on a specified board.
  • Run the display cpu-defend whitelist-v6 session-car radiusv6 statistics slot slot-id command to check information about CAR for whitelisted RADIUSv6 sessions on a specified board.
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic