Testing a Configured Authentication Server

You can test the configuredRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.authentication server in the WebUI or theCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.. This feature allows you to check a configuredRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.authentication server or the internal database. You can use this feature to check for an “out of service”RADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server.

The followingCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.commands configure a user in the internal database:

(host)(mynode)# local-userdb add kgreen lkjHGfds

(host)(mynode)# aaa test-server pap internal kgreen lkjHGfds

Starting fromArubaOS8.1.0.0, theaaa test-servercommand includes the verbose option. Theverboseoption helps display the response of theRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server on a successful or failed authentication. This eases troubleshooting an active network. This enhancement applies to both the WebUI and theCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions..

The following procedure describes how to get theRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server responses on an authentication success or failure:

1.In theMobility Masternode hierarchy, go to theDiagnostics > Tools > AAA Server Testtab.

2.选择一个服务器的Server Namedrop-down list.

3.Select an option forAuthentication method. You can select eitherMSCHAPv2orPAP.

4.Enter the user credentials in theUsernameandPasswordtext boxes.

5.ClickTest. The Authentication Status along with theRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server response is displayed.

The followingCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.command displays theRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server attributes as returned by the server:

(host)(mynode) # aaa test-server mschapv2 internal raduser1 raduser verbose

Authentication Successful

Processing time (ms) : 1.397

Attribute value pairs in response

---------------------------------

Vendor Attribute Value

------ --------- -----

MS-CHAPv2

Role guest