Send authentication and accounting requests, and read back every attribute in the reply — decoded, not as raw hex. RadPING is a spiritual successor to MasterSoft's NTRadPing — the classic, ...
Using IPsec/L2TP is a common deployment. Note that it is a dated solution that should be avoided when possible. Specifically, there are issues with multiple Transport Mode IPsec connections and NAT.