CLI Guide

Security Commands 1018
key
Use the key command to specify the encryption key which is shared with the
RADIUS server. Use the no form of this command to remove the key.
Syntax
key [ 0|7] key-string
no key
• 0—The key string that follows is the unencrypted shared secret. The
length is 1–128 characters.
• 7—The key string that follows is the encrypted shared secret. The length is
exactly 256 characters.
• key-string — The key string in encrypted or unencrypted form. In
encrypted form, it must be 256 characters in length. In unencrypted form,
it may be up to 128 characters in length.
Default Configuration
There is no key configured by default.
Command Mode
RADIUS Server Configuration mode
User Guidelines
There are no user guidelines for this command.
In an Access-Request, encrypted passwords are sent using the RSA Message
Digest algorithm (MD5).
If no encryption parameter (7) is present, the key string is interpreted as an
unencrypted shared secret.
Keys are always displayed in their encrypted form in the running
configuration.
The encryption algorithm is the same across switches. Encrypted passwords
may be copied from one switch and pasted into another switch.