radiusctl8

Usage

Overview

The radiusctl utility controls the radiusd(8) daemon.

The following commands are available:

test hostname radius_secret user_name [options] Sends a RADIUS authentication request packet and shows the result. The request is for the user specified by user_name and sent to the RADIUS server specified by hostname. radius_secret is the shared secret with the server. The options are as follows:

interval seconds

Specifies how many seconds to wait before resending a packet. The default is 2.

maxwait seconds

Specifies the maximum amount of time to wait for a valid reply packet. The default is 8.

method method

Use method for authentication. It can be either pap, chap, or mschapv2. If this option is omitted, pap is used.

nas-port nas-port

Specify an integer value for the NAS-Port attribute in the packet. If this option is omitted, 0 is used.

password password

Use password for user_name.

port port

Use port when sending a packet to hostname. If the port is omitted, the default port number 1812 is used.

tries number

Specifies the number of packets to try sending. The default is 3.

msgauth yes | no

Specifies if Message-Authenticator is given for the access request packet. The default is yes.

ipcp show

Show all ipcp sessions in the database of radiusd_ipcp(8) briefly.

ipcp dump [-json]

Dump all ipcp sessions in the database of radiusd_ipcp(8). When -json is specified, radiusctl shows the sessions in JSON format.

ipcp monitor [-json]

Monitor the database of radiusd_ipcp(8), show newly created sessions and deleted sessions. When -json is specified, radiusctl shows the sessions in JSON format.

ipcp disconnect sequence

Request to disconnect the session specified by the sequence.

ipcp delete sequence

Request to delete the session specified by the sequence without requesting disconnection.

Examples

(show all sessions)
$ doas radiusctl ipcp show
Seq Assigned        Username               Start    Tunnel From
--- --------------- ---------------------- -------- -------------------------
 21 192.168.1.99    [email protected]      11:35AM  203.0.113.32:34859
 22 192.168.1.103   [email protected]     11:56AM  192.0.2.4:61794
$
(disconnect Nakadai's session)
$ doas radiusctl ipcp disconnect 22
$