Administrator Guide

Security Commands 931
In an Access-Request, encrypted passwords are sent using the RSA Message
Digest algorithm (MD5). MD5 always transmits the encrypted password in 32
characters.
If no encryption parameter (7 or encrypted) is present, the key string is
interpreted as an unencrypted shared secret.
Keys are always displayed in their encrypted form in the running
configuration.
The encryption algorithm is the same across switches. Encrypted passwords
may be copied from one switch and pasted into another switch and will send
the same MD5 encrypted password over the wire.
Command History
Updated in version 6.3.0.1 firmware.
Example
The following two examples globally configure the RADIUS server key for all
configured servers. The two examples are identical in effect.
console(config)#key “This is a key string”
console(config)#key 0 “This is a key string”
msgauth
Use the msgauth command to enable the message authenticator attribute to
be used for the RADIUS Authenticating server being configured. Use the
“no” form of this command to disable the message authenticator attribute.
Syntax
msgauth
no msgauth
Default Configuration
The message authenticator attribute is enabled by default.
Command Mode
RADIUS Server Configuration mode
2CSNXXX_SWUM204.book Page 931 Monday, January 25, 2016 1:25 PM