Free Radius Test Tool

From the developer: RADIUS test client is an easy to use tool to simulate, debug and monitor most RADIUS and Network Access Servers (NAS). As a test client simulate RADIUS authentication, accounting and CoA/Disconnect requests for multiple devices and usage scenarios. The easiest way to test is by using Diagnostics Authentication in the GUI. First, add a RADIUS server entry to the user manager as described in Authentication Servers. Navigate to System User Manager, Authentication Servers tab Fill in the settings to match the entry in FreeRADIUS.

  1. Test Radius Server
  2. Free Radius Test Tool Kit

EAP Testing

While FreeRADIUS comes with a command-line tool calledradeapclient, by far and away the best EAP testing tool isthe eapol_test program from wpa_supplicant.

The default build of wpa_supplicant does not build theeapol_test program, so you will have to do that yourself.

Building eapol_test

Download the latest version of wpa_supplicant,and un-tar it, then follow these instructions to build it:

$ cd wpa_supplicant-version/wpa_supplicant
$ cp defconfig .config
$ vi .config

Find the line containing

Tool

and change it to

Free
CONFIG_EAPOL_TEST=y

Then, type

Free Radius Test Tool

Once it is done, copy the file to some where in your PATH.e.g. /usr/local/bin, or ~/bin. The following testsassume that the eapol_test file has been installed, such asvia the following command:

$ cp eapol_test /usr/local/bin

Testing

Test Radius Server

Run the eapol_test program from the command-line, with oneof the following configuration files.

Where file is one of the configuration files below. Weare also assuming that the RADIUS server is on localhost, andthat the shared secret is testing123.

Test
  • PEAPv0
    • EAP-GTC
  • EAP-TTLS

These configuration files assume that you are using the test userbob, with password hello, as given in the PAP howto.

If the productioncertificates have been created, then the ca_cert entry ineach configuration file can be un-commented. The eapol_testprogram will then verify the server certificate.

Session Resumption, or Fast Reauthentiction

Test radius authentication

Free Radius Test Tool Kit

Use eapol_test -r 1 ... in order to test sessionresumption. See the eapol_test documentation for moreinformation.