Switch 7700 Command reference Guide, v2.0

RADIUS Protocol Configuration Commands 377
Parameter
accounting: Configures to set/delete the authentication key for the RADIUS
accounting packet.
authentication: Configures to set/delete the encryption key for RADIUS
authentication/authorization packet.
string: Specifies the key with a character string not exceeding 16 characters,
excluding “/”, “: ”, “*”, “? ”, “<” and “>”. By default, the key is “3Com”.
Description
■ Use the key command to configure encryption key for RADIUS
authentication/authorization or accounting packet.
■ Use the undo key command to restore the default key.
RADIUS client (switch system) and RADIUS server use MD5 algorithm to hash the
exchanged packets. The two ends verify the packet through setting the key. Only
when the keys are identical can both ends accept the packets from each other and
give responses. So it is necessary to ensure that the keys set on the switch and the
RADIUS server are identical. If the authentication/authorization and accounting are
performed on two different servers with different keys, you should set two keys
respectively.
Related commands: primary accounting, primary authentication, radius
scheme
.
Example
Example 1:
Set the authentication/authorization key of the RADIUS server group to “hello”.
[SW7700-radius]key authentication hello
Example 2:
Set the accounting packet key of the RADIUS server group to “ok”.
[SW7700-radius]key accounting ok
local-server Syntax
local-server nas-ip ip-address key password
undo local-server nas-ip ip-address
View
System view
Parameter
nas-ip ip-address: set IP address of access server. ip-address is expressed in the
format of dotted decimal.
key password: Set password of logon user. password is a character string
containing up to 16 characters.