|
Packet filter to watch RADIUS (TM) packets UPDATED: August 26, 1999 SUMMARY: This packet filter will show all RADIUS packets returning to the PortMaster (TM). It will NOT show RADIUS packets from the PortMaster. This is a very useful tool in debugging RADIUS problems. If the RADIUS packet is returning from an IP address that differs from the IP address (or the IP address of the hostname) that appears for the RADIUS server with the "show global" command, then the packet is discarded. Command> add filter r New Filter successfully added Command> set filter r 1 permit udp src eq 1645 Filter r updated Command> set console Setting CONSOLE to admin session Command> ptrace r ext Packet Tracing Enabled # Example ptrace output UDP from 192.168.1.2.1645 to 192.168.1.6.1026 UDP from 192.168.1.2.1645 to 192.168.1.6.1026 UDP from 192.168.1.2.1645 to 192.168.1.6.1026 UDP from 192.168.1.2.1645 to 192.168.1.6.1026 To turn off... Command> ptrace Packet Tracing Disabled Command> reset console Console RESET To show all RADIUS packets from the PortMaster to the RADIUS server, add this line to the packet filter: Command> set filter r 2 permit udp dst eq 1645 Filter r updated |