Radius monitor

The Radius server monitor tests the performance of Radius servers. Radius is a network protocol that provides authentication, access and accounting for computers that want to connect to a network. Radius is often used to provide access to wireless networks. All tests are performed using SNMP get requests. Consult your Radius server documentation to find out if your Radius server responds to SNMP requests by default or if you have to configure this feature.

• The KNM host/gateway has to be setup as a Radius client with the Radius server, using a shared secret.
• For comparison options, the Radius server also has to have a working SNMP agent installed.

Note: The community name, SNMP version, and port used used by Network Monitor to connect to an SNMP asset is set on the Authentication tab of an asset node. The asset node may inherit this setting from a parent node. See the Installation Checklist.

• System type: All
• Category: Network services

Note: Only monitor specific settings are documented here. See Standard monitor settings.

Monitor specific properties

These fields are required to connect to the Radius server to perform configured tests.

• Secret - Pre-shared secret word used to encrypt all passwords sent to Radius server for authentication.
• Logon account - The logon account contains the credentials to use when authenticating with the Radius server.

Performance monitoring options

Each test is performed in the scope of a time span. The time span is denoted in seconds.

• Max invalid auth requests - The maximum allowed number of access request packets received from an unknown address during the time span defined by the field below. The test fails if the number exceeds this value. Leave the field blank to not perform this test.
• Max accounting requests - The number of accounting request packets received from an unknown address during the time span defined by the field below. The test fails if the number exceeds this value. Leave the field blank to not perform this test.
• Max total access rejects - The maximum number of access rejected packets sent during the time span defined by the field below. Leave the field blank to not perform this test.

Comparison options

In addition to the above tests a customized SNMP get request can be made. The result of the request can be compared to a predefined value using a compare operation.

• Radius compare OID - An OID relative to the base Radius OID (.1.2.6.1.2.1.67 or .iso. org.dod.internet.mgmt.mib-2.radiusMIB) that can be requested for each test and compared with a predefined compare value. Leave the field blank to not perform this test.
• Compare value - Value to compare the query result with.
• Value type - Type of value that is compared with the retrieved value from the database.
• Operation - Operation to evaluate the returned query result and the compare value to determine if the test succeeded or failed.