Users Guide

Security Commands 946
Default Configuration
There is no key configured by default.
Command Mode
RADIUS Server Configuration mode
User Guidelines
There are no user guidelines for this command.
In an Access-Request, encrypted passwords are sent using the RSA Message
Digest algorithm (MD5).
If no encryption parameter (7) is present, the key string is interpreted as an
unencrypted shared secret.
Keys are always displayed in their encrypted form in the running
configuration.
The encryption algorithm is the same across switches. Encrypted passwords
may be copied from one switch and pasted into another switch.
Command History
Updated in version 6.3.0.1 firmware.
Example
The following two examples globally configure the RADIUS server key for all
configured servers. The two examples are identical in effect.
console(config)#radius server auth 1.2.3.4
console(config-auth-radius)#key "This is a key string"
console(config-auth-radius)#key 0 "This is a key string"
msgauth
Use the msgauth command to enable the message authenticator attribute to
be used for the RADIUS Authenticating server being configured. Use the
“no” form of this command to disable the message authenticator attribute.
Syntax
msgauth