---
name: "radeapclient"
section: "1"
platform: "linux"
package: "freeradius"
version: "3.2.10-4"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/radeapclient"
---

# radeapclient(1)

send EAP packets to a RADIUS server, calculate responses

## NAME

radeapclient - send EAP packets to a RADIUS server, calculate responses

## SYNOPSIS

**radeapclient** \[**-4**\] \[**-6**\] \[**-c** *count*\] \[**-d** *raddb\_directory*\] \[**-f** *file*\] \[**-h**\] \[**-i** *source\_ip*\] \[**-q**\] \[**-s**\] \[**-r** *retries*\] \[**-S** *file*\] \[**-t** *timeout*\] \[**-v**\] \[**-x**\] *server {acct\|auth} secret*

## DESCRIPTION

**radeapclient** is a radius client program. It can send arbitrary radius packets to a radius server, then shows the reply. Radeapclient differs from radclient in that if there is an EAP-MD5 challenge, then it will be responded to.

**radeapclient** is otherwise identical to **radclient**.

The *EAP-Identity* attribute, if present is used to construct an EAP Identity message.

The *EAP-MD5-Password* attribute, if present is used to respond to an MD5 challenge.

No other EAP types are currently supported.

## OPTIONS

- \-4

  Use IPv4 (default)

- \-6

  Use IPv6

- \-c *count*

  Send each packet *count* times.

- \-d *raddb*

  Set dictionary directory.

- \-f *file*

  Read packets from *file*, not stdin.

- \-r *retries*

  If timeout, retry sending the packet *retries* times.

- \-t *timeout*

  Wait *timeout* seconds before retrying (may be a floating point number).

- \-h

  Print usage help information.

- \-i *id*

  Set request id to '*id*'.  Values may be 0..255

- \-S *file*

  Read secret from *file*, not command line.

- \-q

  Quiet, do not print anything out.

- \-s

  Print out summary information of auth results.

- \-v

  Show program version information.

- \-x

  Enable debugging mode.

## EXAMPLE

A sample session that queries the remote server with an EAP-MD5 challenge.

```
( echo 'User-Name = "bob"';
  echo 'EAP-MD5-Password = "hello"';
  echo 'NAS-IP-Address = marajade.sandelman.ottawa.on.c';
  echo 'EAP-Code = Response';
  echo 'EAP-Id = 210';
  echo 'EAP-Type-Identity = "bob";
  echo 'Message-Authenticator = 0x00';
  echo 'NAS-Port = 0' ) >req.txt
radeapclient -x localhost auth testing123 <req.txt
```

## SEE ALSO

[radclient(1)](/radclient/1.md)

## AUTHOR

Michael Richardson, \<mcr@sandelman.ottawa.on.ca\>
