Testing a Configured Authentication Server

You can test the configured RADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  authentication server in the WebUI or the CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.. This feature allows you to check a configured RADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  authentication server or the internal database. You can use this feature to check for an “out of service” RADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  server.

The following CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. commands configure a user in the internal database:

(host)(mynode)# local-userdb add kgreen lkjHGfds

(host)(mynode)# aaa test-server pap internal kgreen lkjHGfds

Starting from ArubaOS 8.1.0.0, the aaa test-server command includes the verbose option. The verbose option helps display the response of the RADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  server on a successful or failed authentication. This eases troubleshooting an active network. This enhancement applies to both the WebUI and the CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions..

The following procedure describes how to get the RADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  server responses on an authentication success or failure:

1. In the Mobility Master node hierarchy, go to the Diagnostics > Tools > AAA Server Test tab.

2. Select a server from the Server Name drop-down list.

3. Select an option for Authentication method. You can select either MSCHAPv2 or PAP.

4. Enter the user credentials in the Username and Password text boxes.

5. Click Test. The Authentication Status along with the RADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  server response is displayed.

The following CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. command displays the RADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  server attributes as returned by the server:

(host)(mynode) # aaa test-server mschapv2 internal raduser1 raduser verbose

Authentication Successful

Processing time (ms) : 1.397

Attribute value pairs in response

---------------------------------

Vendor Attribute Value

------ --------- -----

MS-CHAPv2

Role guest