One thing I like to show folks when I install ISE for them or when I teach the SISE class is how to use the NTRadPing utility to test authentication against ISE. Most people I’ve seen will add ISE as a RADIUS Server on a switch and then use the
test aaa command, which works fine. However with NTRadPing you can test directly from your desktop.
Here’s how I set it up.
Add NTRadPing As A NAD
First add NTRadPing as a network access device in ISE as seen below.
Head over to Dialways and download the free NTRadPing utility. Run through the install process and launch the program
Populate the NTRadPing Values and Test
In the below example I’ve configured the settings of NTRadPing to test authentication against my ISE using the username user2 and the password cisco123.
The user doesn’t exist yet so I want to see it fail in this case. That’s exactly the response we get from ISE.
We can even verify this by looking at our Authenticaions in ISE under the Operations menu. In this case I have selected the details for the user2 failure to get more information on the results. There’s nothing special to see here, but it proves that we are sending the request to ISE. We could configure a user and test again, which would be the nice thing to do here, but I’m going to leave the testing to you.
The point here is not to show a successful authentication, rather to show you a handy little utility. Happy Labbing!