54
simple: Sets a plaintext shared key.
string: Specifies the shared key string. This argument is case sensitive.
• In non-FIPS mode:
{ A ciphertext shared key is a string of 1 to 117 characters.
{ A plaintext shared key is a string of 1 to 64 characters.
• In FIPS mode:
{ A ciphertext shared key is a string of 15 to 117 ch ara c t e rs .
{ A plaintext shared key is a string of 15 to 64 characters. The string must contain digits,
uppercase letters, lowercase letters, and special characters.
Usage guidelines
The shared keys configured by using this command apply to all servers in the scheme. Make sure the
settings match the shared keys configured on the RADIUS servers.
The shared keys specified for specific RADIUS servers take precedence over the shared key specified with
this command.
For security purposes, all shared keys, including shared keys configured in plain text, are saved in
ciphertext.
Examples
# For RADIUS scheme radius1, set the shared key for secure accounting communication to ok in plain
text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key accounting simple ok
Related commands
display radius scheme
nas-ip (RADIUS scheme view)
Use nas-ip to specify a source IP address for outgoing RADIUS packets.
Use undo nas-ip to delete a source IP address for outgoing RADIUS packets.
Syntax
nas-ip { ipv4-address | ipv6 ipv6-address }
undo nas-ip [ ipv6 ]
Default
The source IP address of an outgoing RADIUS packet is the IP address specified by using the radius
nas-ip command in system view.
If the radius nas-ip command is not configured, the source IP address is the IP address of the outbound
interface.
Views
RADIUS scheme view
To Next Page
Loading...
Need help?
General
