RADIUSCTL(8) | System Manager's Manual | RADIUSCTL(8)

# NAME

`radiusctl` — control the RADIUS protocol daemon

# SYNOPSIS

`radiusctl` | command [argument ...]

# DESCRIPTION

The `radiusctl` utility controls the radiusd(8) daemon.

The following commands are available:

`test` hostname radius_secret user_name [options]
  Sends a RADIUS authentication request packet and shows the result. The request is for the user specified by user_name and sent to the RADIUS server specified by hostname. radius_secret is the shared secret with the server. The options are as follows:
  `interval` seconds
    Specifies how many seconds to wait before resending a packet. The default is 2.
  `maxwait` seconds
    Specifies the maximum amount of time to wait for a valid reply packet. The default is 8.
  `method` method
    Use method for authentication. It can be either `pap`, `chap`, or `mschapv2`. If this option is omitted, `pap` is used.
  `nas-port` nas-port
    Specify an integer value for the NAS-Port attribute in the packet. If this option is omitted, 0 is used.
  `password` password
    Use password for user_name.
  `port` port
    Use port when sending a packet to hostname. If the port is omitted, the default port number 1812 is used.
  `tries` number
    Specifies the number of packets to try sending. The default is 3.
  `msgauth` yes | no
    Specifies if Message-Authenticator is given for the access request packet. The default is yes.
`ipcp show`
  Show all ipcp sessions in the database of radiusd_ipcp(8) briefly.
`ipcp dump` [`-json`]
  Dump all ipcp sessions in the database of radiusd_ipcp(8). When `-json` is specified, `radiusctl` shows the sessions in JSON format.
`ipcp monitor` [`-json`]
  Monitor the database of radiusd_ipcp(8), show newly created sessions and deleted sessions. When `-json` is specified, `radiusctl` shows the sessions in JSON format.
`ipcp disconnect` sequence
  Request to disconnect the session specified by the sequence.
`ipcp delete` sequence
  Request to delete the session specified by the sequence without requesting disconnection.

# EXAMPLES

    (show all sessions)
    $ doas radiusctl ipcp show
    Seq Assigned        Username               Start    Tunnel From
    --- --------------- ---------------------- -------- -------------------------
     21 192.168.1.99    mifune@example.jp      11:35AM  203.0.113.32:34859
     22 192.168.1.103   nakadai@example.jp     11:56AM  192.0.2.4:61794
    $

    (disconnect Nakadai's session)
    $ doas radiusctl ipcp disconnect 22
    $

# SEE ALSO

radiusd(8), radiusd_ipcp(8)

September 15, 2024 | Debian