R3721-F3210-F3171-HP High-End Firewalls Access Control Command Reference-6PW101

125
• In FIPS mode, the key must be a ciphertext string of at least 8 characters that must contain uppercase
letters, lowercase letters, digits, and special characters.
Description
Use key to set the shared key for RADIUS authentication/authorization or accounting packets.
Use undo key to restore the default.
By default, no shared key is configured.
The shared keys specified during the configuration of the RADIUS servers, if any, take precedence.
The shared keys configured on the firewall must match those configured on the RADIUS servers.
Related commands: display radius scheme.
Examples
# For RADIUS scheme radius1, set the shared key for authentication/authorization packets to the
ciphertext string IT8Q4sHnitM= and specify to display the key in cipher text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key authentication cipher IT8Q4sHnitM=
[Sysname-radius-radius1] display this
#
radius scheme radius1
key authentication cipher IT8Q4sHnitM=
#
# For RADIUS scheme radius1, set the shared key for accounting packets to the plaintext string ok and
specify to display the key in plain text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key accounting simple ok
[Sysname-radius-radius1] display this
#
radius scheme radius1
key accounting simple ok
#
# For RADIUS scheme radius1, set the shared key for accounting packets to the plaintext string ok and
specify to display the key in cipher text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key accounting ok
[Sysname-radius-radius1] display this
#
radius scheme radius1
key accounting cipher aMjIsi9yePg=
#
nas-ip (RADIUS scheme view)
Syntax
nas-ip { ipv4-address | ipv6 ipv6-address }