Cisco Systems XR manual Radius-server key, SR-44

Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software

radius-server key

radius-server key

To set the authentication and encryption key for all RADIUS communications between the router and the RADIUS daemon, use the radius-server key command in global configuration mode. To disable the key, use the no form of this command.

radius-server key {0 clear-text-key 7 encrypted-key clear-text-key}

	no radius-server key
Syntax Description	0 clear-text-key	Specifies an unencrypted (cleartext) shared key.
	7 encrypted-key	Specifies a encrypted shared key.
	clear-text-key	Specifies an unencrypted (cleartext) shared key.
Defaults	The authentication and encryption key is disabled.

Command Modes

Command History

Global configuration

Release	Modification
Release 3.2	This command was introduced on the Cisco CRS-1 and
	Cisco XR 12000 Series Router.
Release 3.3.0	No modification.

Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

The key entered must match the key used on the RADIUS server. All leading spaces are ignored, but spaces within and at the end of the key are used. If you use spaces in your key, do not enclose the key in quotation marks unless the quotation marks themselves are part of the key.

Task ID	Task ID	Operations
	aaa	read, write
Examples	The following example shows how to set the cleartext key to “samplekey”:
	RP/0/RP0/CPU0:router# configure
	RP/0/RP0/CPU0:router(config)# radius-server key 0 samplekey

The following example shows how to set the encrypted shared key to “anykey”:

RP/0/RP0/CPU0:router# configure

RP/0/RP0/CPU0:router(config)# radius-server key 7 anykey

Cisco IOS XR System Security Command Reference

SR-44