RadPerf RADIUS performance testing utility One of the most critical steps when building a RADIUS system is performance characterisation. This means testing the system to see if both authentication (i.e., read-only) and accounting (i.e., read-write) behavior is acceptable. Thank you for downloading RADIUS test client from our software portal. The software is periodically scanned by our antivirus system. We also encourage you to check the files with your own antivirus before launching the installation. This download is absolutely FREE. The download version of RADIUS test client is.
Testing the FreeRADIUS 2.x Package onpfSense
Free Radius Test Tool Kit
Test FreeRADIUS performance with jRadius¶ jRadius is a tool to test a FreeRADIUS server. It can perform many different request types, numbers of requests, attributes and authentication methods. It can test how many requests a RADIUS server can answer at a time, to make sure that it will perform well in a specific environment.
Test the FreeRADIUS configuration¶
FreeRADIUS offers an easy to use command line tool to check if theserver is running and listening to incoming requests. An interface,a NAS/Client and a user must all be configured:
- Add a User with the following configuration:
- Username: testuser
- Password: testpassword
- Add a Client/NAS with the following configuration:
- IP-Address: 127.0.0.1
- Shared Secret: testing123
- Add an interface with the following configuration:
- IP-Address: 127.0.0.1
- Interface-Type: Auth
- Port: 1812
- SSH to the pfSense firewall and type in the following on the commandline while FreeRADIUS is running (check before in System Log):
The following output should appear if everything was setup correctly:
The really necessary thing is Access-Accept. Check the system logfor the following output:
If something was configured wrong (such as an incorrect username) thenthis will be displayed:
![Free Radius Test Tool Free Radius Test Tool](https://www.serverwatch.com/imagesvr_ce/3409/free-radius-3.png)
The Accesss-Reject packet is visible, and the system log willcontain the following output:
If the steps above do not work then do not need proceed with any otherconfiguration. This is the first thing that should be tested.
There is a Windows testtool availableas well. Another nice tool is the JRadiusFramework, covered next.
Test FreeRADIUS performance with jRadius¶
jRadius is a tool to test a FreeRADIUS server. It can perform manydifferent request types, numbers of requests, attributes andauthentication methods. It can test how many requests a RADIUS servercan answer at a time, to make sure that it will perform well in aspecific environment. This tool needs a non-windows system with java torun. I tried with openSUSE:
![Test Test](/uploads/1/1/9/8/119848089/849689407.jpeg)
- Download JRadius Minimal (client).
- Unzip the file with the following command:
- Start the application with the following command:
The application window will open. Fill out the fields:
- RADIUS tab
- Transport: UDP
- RADIUS Server: 192.168.0.10
- Shared Secret: mysharedsecret
- Auth Port: 1812
- Acct Port: 1813
- Send Timeout: 10 (or fill in what the NAS offers as timeoutto make test more “real”)
- Send Retries: 0 (or fill in what the NAS offers as timeoutto make test more “real”)
- Requester Threads: 1 (To understand this option think aboutthe number of NAS nodes. Every NAS is a Requester Thread. Inworst case after a power cycle all NAS reboot at once so enterhere the amount of NAS nodes)
- Requests per Thread: 1 (To understand this think about thenumber of hosts which are connected to this NAS at a time and whenthe NAS rebooted all clients will try to reauthenticate)
- Simulation Type: Auth only (if accounting is chosen, thenadditional attributes must be added later)
- Authentication Protocol: PAP (Change it to suit the needs ofthe site but TLS needs a client cert, PEAP users only the servercert from FreeRADIUS)
- Verify Standard: None
- Check Log RADIUS to log tab
- Attributes tab:
- User-Name: myuser
- User-Password: mypass
- NAS-Port: 25 (any value is ok)
- NAS-IP-Address: 192.168.0.111 (IP of the NAS)
- Check all four attributes in AccessReq
- RADIUS tab
- Click Start
Then the test will be performed. It could take some time and the displaywill show the number of requests can be handled per second and theresponse speed. If the server cannot handle the requests fast enoughthen think about increasing FreeRADIUS > Settings, Maximum Numberof Threads. Do not increase this unlimited. It will help on peaks butif there is a high load all the time, think about a faster backend(MySQL instead of flat file). There is also a speed difference if thetestuser in FreeRADIUS > USers is listed at the bottom of a 100users long list or at the top. And there is a difference if there aremany reply attributes like VLAN ID and so on.
Test Windows Radius Server
After this performance test check the FreeRADIUS server as described inthis chapter: FreeRADIUS 2.x package