Radiusd

freeradius open source

Debug mode: \/ramfs\/radius\/sbin\/radiusd -Xxx 2>&1 | tee \/tmp\/radiusdlog.txt

• And debug mode can also enable in radius server

Add a fake client and send msg to radius server (-x: debug mode)

echo "$attribute" | radclient $SERVER_IP:$ACCOUNT_PORT acct $SECRET_KEY -r $NUM_RETRIES -t $RETRIES_TIMEOUT

CoA (Change Of Authorization)

• Setup a radius that allow it can change original attribute

• 測試方法: 利用另外一台DUT 當radius server 下 radclient 去 change attribute

CoA Messages

• CoA-Request (43)

• CoA-ACK (44)

• CoA-NAK (45)