R3303-HP 6600/HSR6600 Routers Security Command Reference

70
Views
RADIUS scheme view
Default command level
2: System level
Parameters
accounting: Sets the shared key for secure RADIUS accounting communication.
authentication: Sets the shared key for secure RADIUS authentication/authorization communication.
cipher: Sets a ciphertext shared key.
simple: Sets a plaintext shared key.
key: Specifies the shared key string. This argument is case sensitive. If simple is specified, it must be a
string of 1 to 64 characters. If cipher is specified, it must be a ciphertext string of 1 to 117 c h a rac t e r s. I f
neither cipher nor simple is specified, you set a plaintext shared key string. In FIPS mode, the shared key
must be a string of at least 8 characters that contain numbers, uppercase letters, lowercase letters, and
special characters.
Usage guidelines
For secrecy, all shared keys, including keys configured in plain text, are saved in cipher text.
The shared keys specified during the configuration of the RADIUS servers take precedence.
The shared keys configured on the device must match those configured on the RADIUS servers.
Examples
# For RADIUS scheme radius1, set the shared key for secure accounting communication to ok in plain
text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key accounting simple ok
# For RADIUS scheme radius1, set the shared key for secure accounting communication to ok in plain
text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key accounting ok
# For RADIUS scheme radius1, set the shared key for secure authentication/authorization
communication to $c$3$NMCbVjyIutaV6csCOGp4zsKRTlg2eT3B in cipher text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key authentication cipher
$c$3$NMCbVjyIutaV6csCOGp4zsKRTlg2eT3B
Related commands
display radius scheme
nas-backup-ip
Use nas-backup-ip to specify a backup source IP address for outgoing RADIUS packets in a stateful
failover scenario.