Radius-Server Key - Cisco CRS User Manual

Authentication, Authorization, and Accounting Commands

radius-server key

To set the authentication and encryption key for all RADIUS communications between the router and the
RADIUS daemon, use the radius-server key command. To disable the key, use the no form of this command.
radius-server key {0 clear-text-key| 7 encrypted-key| clear-text-key}
no radius-server key
Syntax Description
0 clear-text-key
7 encrypted-key
clear-text-key
Command Default
The authentication and encryption key is disabled.
Command Modes
Global configuration mode
Command History
Release
Release 3.2
Usage Guidelines
The key entered must match the key used on the RADIUS server. All leading spaces are ignored, but spaces
within and at the end of the key are used. If you use spaces in your key, do not enclose the key in quotation
marks unless the quotation marks themselves are part of the key.
Task ID
Task ID
aaa
Examples This example shows how to set the cleartext key to "samplekey:"
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# radius-server key 0 samplekey
This example shows how to set the encrypted shared key to "anykey:"
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# radius-server key 7 anykey
OL-24740-01
Specifies an unencrypted (cleartext) shared key.
Specifies a encrypted shared key.
Specifies an unencrypted (cleartext) shared key.
Modification
This command was introduced.
Operations
read, write
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
radius-server key
51