radius-server key
To set the authentication and encryption key for all RADIUS communications between the router and the
RADIUS daemon, use the radius-server key command. To disable the key, use the no form of this command.
radius-server key {0 clear-text-key| 7 encrypted-key| clear-text-key}
no radius-server key
Syntax Description
Specifies an unencrypted (cleartext) shared key.
0 clear-text-key
Specifies a encrypted shared key.
7 encrypted-key
Specifies an unencrypted (cleartext) shared key.
clear-text-key
Command Default
The authentication and encryption key is disabled.
Command Modes
Global configuration mode
Command History
ModificationRelease
This command was introduced.Release 3.2
Usage Guidelines
The key entered must match the key used on the RADIUS server. All leading spaces are ignored, but spaces
within and at the end of the key are used. If you use spaces in your key, do not enclose the key in quotation
marks unless the quotation marks themselves are part of the key.
Task ID
OperationsTask ID
read, writeaaa
Examples
This example shows how to set the cleartext key to “samplekey:”
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# radius-server key 0 samplekey
This example shows how to set the encrypted shared key to “anykey:”
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# radius-server key 7 anykey
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
OL-24740-01 51
Authentication, Authorization, and Accounting Commands
radius-server key