Filter
Top Products
Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software
radius-server key
SR-44
Cisco IOS XR System Security Command Reference
radius-server key
To set the authentication and encryption key for all RADIUS communications between the router and
the RADIUS daemon, use the radius-server key command in global configuration mode. To disable the
key, use the no form of this command.
radius-server key {0 clear-text-key | 7 encrypted-key | clear-text-key}
no radius-server key
Syntax Description
Defaults The authentication and encryption key is disabled.
Command Modes Global configuration
Command History
Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper
task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on
Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
The key entered must match the key used on the RADIUS server. All leading spaces are ignored, but
spaces within and at the end of the key are used. If you use spaces in your key, do not enclose the key in
quotation marks unless the quotation marks themselves are part of the key.
Task ID
Examples The following example shows how to set the cleartext key to “samplekey”:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# radius-server key 0 samplekey
The following example shows how to set the encrypted shared key to “anykey”:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# radius-server key 7 anykey
0 clear-text-key Specifies an unencrypted (cleartext) shared key.
7 encrypted-key Specifies a encrypted shared key.
clear-text-key Specifies an unencrypted (cleartext) shared key.
Release Modification
Release 3.2 This command was introduced on the Cisco CRS-1 and
Cisco XR 12000 Series Router.
Release 3.3.0 No modification.
Task ID Operations
aaa read, write