Routing
Routing

Empty output in "test access radius-server..."

‎01-14-2019 04:46 AM

Hello all,

 

I have an issue when I try to test radius server in MX104 ( Junos 17.3 ) . When I exec command test access radius-server 172.28.30.95 user JOHNDOE password JohnPass secret No1Knows , the output is empty . I reach the radius-server IP ok and this same issue happens with any user . Could you help me please? Thanks a lot . BR . 

1 REPLY 1
Routing

Re: Empty output in "test access radius-server..."

‎01-14-2019 07:52 AM

Hi,

 

This is very old knob. Instead, try the following knob:

 

If its general user:

test aaa authd-lite user test@test.net password test123 profile AAA  

 

For PPP:

test aaa ppp user test@test.net password test123 profile AAA  

 

for DHCP:

 test aaa dhcp user test@test.net password test123 profile AAA  

 

For example:

 

test aaa authd-lite user test@test.net password test123 profile AAA  
    Authentication Grant
    ************User Attributes***********
         User Name -                              test@test.net    
         Framed IPv6 Prefix -                     <not set>        
         Framed IPv6 Pool -                       <not set>        
         NDRA IPv6 Prefix -                       <not set>        
         Login IPv6 Host -                        <not set>        
         Framed Interface Id -                    <not set>        
         Delegated IPv6 Prefix -                  <not set>        
         Delegated IPv6 Pool -                    <not set>        
         NDRA IPv6 Pool -                         <not set>        
         User Password -                          test123          
         Nas Ip Address -                         <not set>        
         NAS Port -                               0                
         Service Type -                           0                
         Framed IP Address -                      <not set>        
         Framed IP Netmask -                      <not set>        
         Filter Id -                              <not set>        
         Framed MTU -                             <not set>        
         Reply Message -                          <not set>        
         Framed Route -                           <not set>        
         Class -                                  <not set>        
         Virtual Router Name -                    <not set>        
         Primary DNS IP Address -                 <not set>        
         Secondary DNS IP Address -               <not set>        
         Primary WINS IP Address -                <not set>        
         Secondary WINS IP Address -              <not set>        
         Ingress Policy Name -                    <not set>        
         Egress Policy Name -                     <not set>        
         IGMP Enable -                            <not set>        
         Redirect VR Name -                       <not set>        
         Service Bundle -                         <not set>        
         Framed Ip Route Tag -                    <not set>        
         Activate Service -                       <not set>        
         Deactivate Service -                     <not set>        
         Service Statistics -                     0                
         IGMP Access Group Name -                 <not set>        
         IGMP Access Source Group_Name -          <not set>        
         MLD Access Group Name -                  <not set>        
         MLD Access Source Group Name -           <not set>        
         MLD Version -                            <not set>        
         IGMP Version -                           <not set>        
         IGMP Immediate Leave -                   <not set>        
         MLD Immediate Leave -                    <not set>        
         IPv6 Ingress Policy Name -               <not set>        
         IPv6 Egress Policy Name -                <not set>        
         Service Interim Acct Interval -          0                
         Max Clients Per Interface -              <not set>        
         Session Timeout -                        599999940        
         Idle Timeout -                           <not set>        
         NAS Port Type -                          0                
         Framed Pool -                            <not set>        
         Agent Remote Id -                        <not set>        
    Acct-start sent
    Acct-start failed
    Logging out subscriber
         Terminate Id -                           <not set>        
    Test complete. Exiting

 

 

Call the radius server in access profile:


set access profile AAA authentication-order radius
set access profile AAA radius authentication-server X.X.X.X
set access profile AAA radius accounting-server X.X.X.X
set access profile AAA radius-server x.x.x.x port 1812
set access profile AAA radius-server x.x.x.x accounting-port 1812
set access profile AAA radius-server x.x.x.x secret "$9$7rV2aji.5T3jHfzFnu0"
set access profile AAA radius-server x.x.x.x timeout 5
set access profile AAA radius-server x.x.x.x retry 5
set access profile AAA radius-server x.x.x.x source-address x.x.x.x

set access-profile AAA

 

 

/Karan Dhanak
# Please mark my solution as accepted if it helped, Kudos are appreciated as well.