Configuring Global Radius Keys - Cisco Nexus 9000 Series Configuration Manual

Configuring Global RADIUS Keys

Configuring Global RADIUS Keys
You can configure RADIUS keys for all servers used by the Cisco NX-OS device. A RADIUS key is a shared
secret text string between the Cisco NX-OS device and the RADIUS server hosts.
Before you begin
Obtain the RADIUS key values for the remote RADIUS servers.
Configure the RADIUS key on the remote RADIUS servers.
SUMMARY STEPS
1. configure terminal
2. radius-server key [0 | 6 | 7] key-value
3. exit
4. (Optional) show radius-server
5. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2 radius-server key [0 | 6 | 7] key-value
Example:
switch(config)# radius-server key 0 QsEfThUkO
Example:
switch(config)# radius-server key 7 "fewhg"
Step 3
exit
Example:
switch(config)# exit
switch#
Step 4
(Optional) show radius-server
Example:
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
46
Purpose
Enters global configuration mode.
Specifies a RADIUS key for all RADIUS servers. You can
specify that the key-value is in clear text format (0), is type-6
encrypted (6), or is type-7 encrypted (7). The Cisco NX-OS
software encrypts a clear text key before saving it to the
running configuration. The default format is clear text. The
maximum length is 63 characters.
By default, no RADIUS key is configured.
Note If you already configured a shared secret using
the generate type7_encrypted_secret
command, enter it in quotation marks, as shown
in the second example. For more information,
see Configuring the Shared Secret for RADIUS
or TACACS+, on page
Exits configuration mode.
Displays the RADIUS server configuration.
Configuring RADIUS
33.