Specifying the shared keys for secure RADIUS communication

About the shared keys for secure RADIUS communication

The RADIUS client and server use the MD5 algorithm and shared keys to generate the Authenticator value for packet authentication and user password encryption. The client and server must use the same key for each type of communication.

A key configured in this task is for all servers of the same type (accounting or authentication) in the scheme. The key has a lower priority than a key configured individually for a RADIUS server.

Restrictions and guidelines

The shared key configured on the device must be the same as the shared key configured on the RADIUS server.

Procedure

  1. Enter system view.

    system-view

  2. Enter RADIUS scheme view.

    radius scheme radius-scheme-name

  3. Specify a shared key for secure RADIUS communication.

    key { accounting | authentication } { cipher | simple } string

    By default, no shared key is specified for secure RADIUS communication.