Re: Radius testing.

[Alan Buxey]

Hi,

> Anybody knows a tool to test radius performance? 

radperf or radtest/radclient with scripting . you might use
JRADIUSSimulator with scripting too. personally, radperf
does what I need.


you can check doc/performance-testing in the source distribution too


theres also doc/tuning_guide to help tweak performance.feedback/input
welcome


alan

PS theres a README file for instructions for radperf
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius testing.

[Alan DeKok]

Francois Gaudreault wrote:
> The only things I find frustrating with radperf is the fact that it
> doesn't support EAP,

  EAP is hard.  eapol_test can do "-r N" to retry many times.

> and the way it agglomerate the request results (ie.
> <10s, <1s, etc), you can't tell the real response time.

  -D file should work.  Or maybe that's the current "git" version.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius testing.

[Michael Holstein]

> Anybody knows a tool to test radius performance? 
>
>   

Vasco's radius simulator. It runs in Wine under Linux just fine.

Regards,

Michael Holstein
Cleveland State University
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius testing.

[Francois Gaudreault]

Hi,


Any advice or ideas?
I personally used radperf to benchmark our radius server installs.  It's 
easy to configure, you only need to build a radius request (attributes) 
and tell radperf how much pps you want to send.


The only things I find frustrating with radperf is the fact that it 
doesn't support EAP, and the way it agglomerate the request results (ie. 
<10s, <1s, etc), you can't tell the real response time.


--
Francois Gaudreault, ing. jr
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radius testing.

[tonimanel]

Hi everybody,

Anybody knows a tool to test radius performance? 

I have seen radperf (without userguide or tutorial) and  radtest
application. 

Any advice or ideas?

Thanks.

Best regards,

Toni.

--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/Radius-testing-tp5001965p5001965.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius Testing Tool

[Alan DeKok]

Ben Brown wrote:
> I did initially look at using the radiusclient-ng library, but I found
> the dictionary parsing to be a bit too fragile. It would bomb out with
> very little provocation.

  Yes, it needs work.

>>   The "radsniff" program distributed with FreeRADIUS reads PCAP files.
>> It uses the FreeRADIUS library to read the dictionaries, and the library
>> can send/receive packets.
> 
> I wasn't aware of radsniff, I'll take a look at the code some time to
> see if I can integrate it. I quite like not needing any other libraries
> though, and it's such a small program really.

  The word I'm looking for is "robust".  :)

  Your program works, and is simple.  The code in FreeRADIUS works, and
is a lot more capable.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius Testing Tool

[Ben Brown]

On Fri, Aug 19, 2011 at 01:35:32PM +0100, Alan DeKok wrote:
>   OK... my main surprise is that you've re-written a RADIUS
> encoder/decoder, and a dictioanry file parser.  All of that code already
> exists...

I did initially look at using the radiusclient-ng library, but I found
the dictionary parsing to be a bit too fragile. It would bomb out with
very little provocation.

>   The "radsniff" program distributed with FreeRADIUS reads PCAP files.
> It uses the FreeRADIUS library to read the dictionaries, and the library
> can send/receive packets.

I wasn't aware of radsniff, I'll take a look at the code some time to
see if I can integrate it. I quite like not needing any other libraries
though, and it's such a small program really.

Ben

-- 
| Ben Brown Broadband Solutions for
| Infrastructure Engineer  Home & Business@
| Plusnet Plc  www.plus.net
| Registered Office: Internet House, 2 Tenter Street, Sheffield, S1 4BY
| Registered in England no: 3279013
+ --- Plusnet - ISPA Best Consumer ISP 2008 ---
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius Testing Tool

[Alan DeKok]

Ben Brown wrote:
> I quickly found this to be very tedious and time consuming, so I started
> looking for a program that would read in the pcap file I'd made with
> tcpdump, fire the packets at the test server and compare the packet it
> got back with the response packets in the capture. After some googling I
> couldn't find anything, so I decided to write one.

  Sounds good.

> Now I am a developer, but an Engineer, so my C might not be the best,
> however I've found this very useful and thought other people might also
> find it useful. It's simple to use and the output is fairly easy to
> interpret.

  OK... my main surprise is that you've re-written a RADIUS
encoder/decoder, and a dictioanry file parser.  All of that code already
exists...

  The "radsniff" program distributed with FreeRADIUS reads PCAP files.
It uses the FreeRADIUS library to read the dictionaries, and the library
can send/receive packets.

  It may have been less work to glue some "send/receive" logic into
radsniff.

  Still, the tool looks useful.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radius Testing Tool

[Ben Brown]

Morning all,

A few months ago I was changing part of our RADIUS platform. I wanted to
thoroughly test the change I was making in our test environment, so I
captured a few thousand RADIUS packets from one of our live servers
using tcpdump, then used tcpreplay to fire them at the test radius
server and then set about comparing the output.

I quickly found this to be very tedious and time consuming, so I started
looking for a program that would read in the pcap file I'd made with
tcpdump, fire the packets at the test server and compare the packet it
got back with the response packets in the capture. After some googling I
couldn't find anything, so I decided to write one.

After using it successfully to test my change, I convinced the
management here to let me open source the resulting code, which you can
now get from:

https://gitorious.org/radreplay/

Now I am a developer, but an Engineer, so my C might not be the best,
however I've found this very useful and thought other people might also
find it useful. It's simple to use and the output is fairly easy to
interpret.

It builds and runs fine on 32 and 64 bit Debian GNU/Linux, and doesn't
have any dependencies other than the standard c library so should build
and run pretty easily on other UNIX based platforms, YMMV. I've
distributed the debian directory with it so if you are using Debian you
can build a package.

Obviously I can't fully support this, any work I do on this is now in my
own time, not on the company's time, but if you find problems with it or
have suggestions let me know and I'll try to see what I can do. Or if
you have improvements clone it and send me a pull request!

Regards,

Ben

-- 
| Ben Brown Broadband Solutions for
| Infrastructure Engineer  Home & Business@
| Plusnet Plc  www.plus.net
| Registered Office: Internet House, 2 Tenter Street, Sheffield, S1 4BY
| Registered in England no: 3279013
+ --- Plusnet - ISPA Best Consumer ISP 2008 ---
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Free Radius testing....

[shirkavand]

HI there,

Are your sure that your freeradius server is up? Try to start freeradius in
debug mode and make the radtest again:

sudo freeradius -X
radtest bob bob localhost 1812 testing

If you get an error trying to start the server with "sudo freeradius -X" try
to stop it and start+test again:

killall freeradius
sudo freeradius -X
radtest bob bob localhost 1812 testing

As James said you need to run in debug mode while tetsing...so you can check
whats going on.

Cheers,

Shirkavand
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Free Radius testing....

[James J J Hooper]

On 16/05/2010 10:26, John Raja wrote:

Hi,
I have installed freeradius server in centos. I am trying to test with
below mentioned command i am getting the error output as given below ,
Please help me out...
I have created the username in the user file "bobCleartext-Password
:= "hello"
_Command_
# radtest bob bob localhost 1812 testing
_Output_
Sending Access-Request of id 147 to 127.0.0.1 port 1812
 User-Name = "bob"
 User-Password = "bob"
 NAS-IP-Address = 127.0.0.1
 NAS-Port = 1812
Sending Access-Request of id 147 to 127.0.0.1 port 1812
 User-Name = "bob"
 User-Password = "bob"
 NAS-IP-Address = 127.0.0.1
 NAS-Port = 1812
Sending Access-Request of id 147 to 127.0.0.1 port 1812
 User-Name = "bob"
 User-Password = "bob"
 NAS-IP-Address = 127.0.0.1
 NAS-Port = 1812
radclient: no response from server for ID 147 socket 3



Hi John,

--
3. DEBUGGING THE SERVER

  Run the server in debugging mode, (radiusd -X) and READ the output.
We cannot emphasize this point strongly enough.  The vast majority of
problems can be solved by carefully reading the debugging output,
which includes WARNINGs about common issues, and suggestions for how
they may be fixed.
--

Is the server running, is the shared secret correct, do you firewall 
traffic on the localhost interface?



-James

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Free Radius testing....

[John Raja]

Hi,
I have installed freeradius server in centos. I am trying to test with below
mentioned command i am getting the error output as given below , Please help
me out...

I have created the username in the user file "bobCleartext-Password :=
"hello"

*Command*
# radtest bob bob localhost 1812 testing
*Output*
Sending Access-Request of id 147 to 127.0.0.1 port 1812
User-Name = "bob"
User-Password = "bob"
NAS-IP-Address = 127.0.0.1
NAS-Port = 1812
Sending Access-Request of id 147 to 127.0.0.1 port 1812
User-Name = "bob"
User-Password = "bob"
NAS-IP-Address = 127.0.0.1
NAS-Port = 1812
Sending Access-Request of id 147 to 127.0.0.1 port 1812
User-Name = "bob"
User-Password = "bob"
NAS-IP-Address = 127.0.0.1
NAS-Port = 1812
radclient: no response from server for ID 147 socket 3


Regards,
John Raja
Network Engineer
IP Extn : 500092
Te: 022-40609028

http://www.5paisa.com/Logo-change-signature.gif";>
Confidentiality & Disclaimer: 
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. Please notify the sender 
immediately by e-mail if you have received this e-mail by mistake and delete 
this e-mail from your system. E-mails are notencrypted and cannot be guaranteed 
to be secured or error-free as information could be intercepted, corrupted, 
lost, destroyed arrive late or incomplete, or contain viruses. The sender, 
which includes India Infoline Limited and its group companies, will not be 
liable for any errors or ommissions in the contents of this message which arise 
as a result of e-mail transmission. If verification is required please request 
a hard-copy version. This message is provided for informational purposes and 
should not be construed as a solicitation or offer to buy or sell any 
securities or related financial instruments.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Query regarding Free Radius Testing

[A . L . M . Buxey]

Hi,

> User-Name = "sujatha"
> User-Password = "test123"
> NAS-IP-Address = 255.255.255.255
> NAS-Port = 1812
> 
> rlm_pap: WARNING! No "known good" password found for the user.
> Authentication may fail because of this.
> 
> rlm_unix: [sujatha]: invalid password
> 
> rad_recv: Access-Request packet from host 127.0.0.1:32769, id=157,
> length=59
> 
> Sending Access-Reject of id 157 to 127.0.0.1 port 32769
> 
> Can I know the reason.

sure - you've just been told the reason in the above output.  rlm_unix
didnt find anything - and due to your config, its been set as the
end of all answers - probably you have 

DEFAULT Auth-Type := System

in your 'users' file (which means 'set the auth-type' to system (unix files)
authentication and dont try anything else.  comment that entry out...and
if you dont use unix authentication then comment out the unix entries
in radiusd.conf etc too

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Query regarding Free Radius Testing

[Pelluru Sujatha]

Hi,

I have installed free radius 1.1.6 and started testing.

But every time when I send an Access-Request message, Access-Reject msg
is received indicating "Invalid Password".

The error looks like this.

 

rad_recv: Access-Request packet from host 127.0.0.1:32769, id=157,
length=59

User-Name = "sujatha"

User-Password = "test123"

NAS-IP-Address = 255.255.255.255

NAS-Port = 1812

rlm_pap: WARNING! No "known good" password found for the user.
Authentication may fail because of this.

rlm_unix: [sujatha]: invalid password

rad_recv: Access-Request packet from host 127.0.0.1:32769, id=157,
length=59

Sending Access-Reject of id 157 to 127.0.0.1 port 32769

 

Can I know the reason.

 

 

Regards,

Pelluru Sujatha  | Software Engineer | Tech Mahindra 

9/7 Opp. Christ College,Hosur Road,Bangalore

* Office:080-41159800 |  Extn:2137  | Cell: 

Email: [EMAIL PROTECTED]

www.techmahindra.com  

 

 

 

 

Pelluru Sujatha  | Software Engineer | Tech Mahindra 

9/7 Opp. Christ College,Hosur Road,Bangalore

* Office:080-41159800 |  Extn:2137  | Cell: 

Email: [EMAIL PROTECTED]

www.techmahindra.com  

 




 
Disclaimer:

This message and the information contained herein is proprietary and 
confidential and subject to the Tech Mahindra policy statement, you may review 
the policy at http://www.techmahindra.com/Disclaimer.html";>http://www.techmahindra.com/Disclaimer.html
 externally and http://tim.techmahindra.com/Disclaimer.html";>http://tim.techmahindra.com/Disclaimer.html
 internally within Tech Mahindra.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html