RADCLIENT(1) FreeRADIUS Daemon RADCLIENT(1)
radclient - send packets to a RADIUS server, show reply
radclient [-d raddb_directory] [-c count] [-f file] [-i id] [-r
num_retries] [-s] [-S shared_secret_file] [-t timeout] [-qvx] server
radclient is a radius client program. It can send arbitrary radius
packets to a radius server, then shows the reply. It can be used to
test changes you made in the configuration of the radius server, or it
can be used to monitor if a radius server is up.
radclient reads radius attribute/value pairs from it standard input, or
from a file specified on the command line. It then encodes these
attribute/value pairs using the dictionary, and sends them to the
The User-Password attribute is automatically encrypted by radclient.
Send each packet count times. /etc/raddb.
The directory that contains the RADIUS dictionary files.
Defaults to /etc/raddb.
File to read the attribute/value pairs from. If this is not
specified, they are read from stdin.
-i id Use id as the RADIUS request Id.
-q Go to quiet mode, and do not print out anything.
Try to send each packet num_retries times, before giving up on
it. The default is 10.
Rather than reading the shared secret from the command-line
(where it can be seen by others on the local system), read it
instead from shared_secret_file.
Wait timeout seconds before deciding that the NAS has not
responded to a request, and re-sending the packet. The default
timeout is 3.
-v Print out version information.
-x Print out extra debugging information.
The hostname or IP address of the remote server. Optionally a
UDP port can be specified. If no UDP port is specified, it is
looked up in /etc/services. The service name looked for is
radacct for accounting packets, and radius for all other
requests. If a service is not found in /etc/services, 1813 and
1812 are used respectively.
acct | auth
Use auth to send an authentication packet (Access-Request), acct
to send an accounting packet (Accounting-Request), status to
send an status packet (Status-Server), or disconnect to send a
disconnection request. Instead of these values, you can also use
a decimal code here. For example, code 12 is also Status-Server.
secret The shared secret for this client. It needs to be defined on
the radius server side too, for the IP address you are sending
the radius packets from.
A sample session that queries the remote server for Status-Server (not
all servers support this. Cistron-radiusd does since version 1.6.5):
$ echo "User-Name = fnord" | radclient 192.168.1.42 12 s3cr3t
Sending request to server 192.168.1.42, port 1812.
radrecv: Packet from host 192.168.1.42 code=2, id=140, length=54
Reply-Message = "FreeRADIUS up 21 days, 02:05"
Miquel van Smoorenburg, firstname.lastname@example.org. Alan DeKok <aland@freera-
22 June 2004 RADCLIENT(1)
Man(1) output converted with