Packet filter to watch RADIUS (TM) packets

UPDATED: August 26, 1999

SUMMARY:

This packet filter will show all RADIUS packets returning to the PortMaster (TM). It will NOT show RADIUS packets from the PortMaster.

This is a very useful tool in debugging RADIUS problems. If the RADIUS packet is returning from an IP address that differs from the IP address (or the IP address of the hostname) that appears for the RADIUS server with the "show global" command, then the packet is discarded.

Command> add filter r
New Filter successfully added
Command> set filter r 1 permit udp src eq 1645
Filter r updated
Command> set console
Setting CONSOLE to admin session
Command> ptrace r ext
Packet Tracing Enabled

# Example ptrace output
UDP from 192.168.1.2.1645 to 192.168.1.6.1026 
UDP from 192.168.1.2.1645 to 192.168.1.6.1026 
UDP from 192.168.1.2.1645 to 192.168.1.6.1026 
UDP from 192.168.1.2.1645 to 192.168.1.6.1026 

To turn off... 

Command> ptrace
Packet Tracing Disabled
Command> reset console
Console RESET
To show all RADIUS packets from the PortMaster to the RADIUS server, add this
line to the packet filter:
Command> set filter r 2 permit udp dst eq 1645
Filter r updated