Key - Huawei Quidway S3900 series Command Manual

Command Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510

1.2.8 key

Syntax
key { accounting | authentication } string
undo key { accounting | authentication }
View
RADIUS scheme view
Parameter
accounting: Specifies to set a shared key for the RADIUS accounting packets.
authentication:
authentication/authorization packets.
string: Shared key, a character string of up to 16 characters.
Description
Use the
authentication/authorization packets or accounting packets.
Use the undo key command to restore the corresponding default shared key.
By default, there is no shared key.
The RADIUS client and server adopt MD5 algorithm to encrypt the RADIUS packets
exchanged with each other. The two parties verify the validity of the exchanged
packets by using the shared keys that have been set on them, and can accept and
respond to the packets sent from each other only if both of them have the same
shared keys. If the authentication/authorization server and the accounting server are
two separate devices and the two servers have different shared keys, you must set
the shared keys for authentication/authorization packets and accounting packets
respectively on the switch.
Related command: primary accounting, primary authentication and radius
scheme.
Example
# Set the shared key for the RADIUS authentication/authorization packets in RADIUS
scheme radius1 to hello.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] radius scheme radius1
New Radius scheme
[Quidway-radius-radius1] key authentication hello
Specifies to
command to
key
Huawei Technologies Proprietary
Chapter 1 AAA & RADIUS & HWTACACS
set a shared
set a shared
1-37
Configuration Commands
key for the RADIUS
key for the RADIUS