Cisco MDS 9000 Series Configuration Manual page 75

Configuring Security Features on an External AAA Server
Specifies an encrypted key for the specified server. The key is restricted to 64 characters.
About the Default RADIUS Server Encryption Type and Preshared Key
You need to configure the RADIUS preshared key to authenticate the switch to the RADIUS server. The
length of the key is restricted to 64 characters and can include any printable ASCII characters (white spaces
are not allowed). You can configure a global key to be used for all RADIUS server configurations on the
switch.
You can override this global key assignment by explicitly using the key option when configuring an individual
RADIUS server in the radius-server host command.
Configuring the Default RADIUS Server Encryption Type and Preshared Key
To configure the RADIUS preshared key, follow these steps:
Procedure
Step 1 switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# radius-server key AnyWord
Configures a preshared key (AnyWord) to authenticate communication between the RADIUS client and
server. The default is clear text.
Step 3
switch(config)# radius-server key 0 AnyWord
Configures a preshared key (AnyWord) specified in clear text (indicated by 0) to authenticate communication
between the RADIUS client and server.
Step 4 switch(config)# radius-server key 7 abe4DFeeweo00o
Configures a preshared key (specified in encrypted text) specified in encrypted text (indicated by 7) to
authenticate communication between the RADIUS client and server.
Setting the RADIUS Server Timeout Interval
You can configure a global timeout value between transmissions for all RADIUS servers.
Note
If timeout values are configured for individual servers, those values override the globally configured values.
To specify the timeout values between retransmissions to the RADIUS servers, follow these steps:
About the Default RADIUS Server Encryption Type and Preshared Key
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
57