How To: Test RADIUS Using RadTest

Version Affected: All

 

Overview

This article explains how to use RadTest, a Windows utility, to send test RADIUS authentication requests to a SecureAuth RADIUS Server, including testing a second-factor challenge/response.

Test RADIUS Using RadTest

1. In RadTest, right-click in the task list and select New Task.

2. On the General Options tab, enter the RADIUS server's hostname or IP address, the shared secret, the RADIUS packet type (Access-Request), the authentication method (for example, PAP), and the RADIUS port (1812 by default).

3. On the Additional Packets tab, add a new packet with the attributes user-name and user-password set to the test account's username and password.

4. Run the task. If the realm requires a second factor, the response is an Access-Challenge rather than an immediate Access-Accept. The Reply-Message shows what the RADIUS server is requesting next (for example, a time-based passcode, or a choice of SMS, phone, or email delivery) — note the returned State attribute, since it must be reused in the next request to continue this same authentication attempt.

5. Edit the same task again and return to the Additional Packets tab — modify the existing packet rather than adding a new one. Remove the original user-password value and replace it with the second-factor response (for example, an OTP), and add a state attribute set to the value copied in the previous step.

6. Run the task again. A Reply-Message of Access granted confirms the second factor was accepted.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.