HP VPN Firewall Appliances Access Control Command Reference

192
Related commands
• reset stop-accounting-buffer
• stop-accounting-buffer enable
• user-name-format
• retry
• retry stop-accounting
key (RADIUS scheme view)
Use key to set the shared key for secure RADIUS authentication/authorization or accounting
communication.
Use undo key to remove the configuration.
Syntax
key { accounting | authentication } [ cipher | simple ] key
undo key { accounting | authentication }
Default
No shared key is configured.
Views
RADIUS scheme view
Default command level
2: System level
Parameters
accounting: Sets the shared key for secure RADIUS accounting communication.
authentication: Sets the shared key for secure RADIUS authentication/authorization communication.
cipher: Sets a cipher text shared key.
simple: Sets a plain text shared key. This keyword is not available for FIPS mode.
key: Specifies the key string. This argument is a case-sensitive string of 1 to 64 characters. In FIPS mode,
the shared key must contain at least 8 characters comprising uppercase letters, lowercase letters, digits,
and special characters.
Usage guidelines
For security purposes, all shared keys, including keys configured in plain text, are saved in cipher text.
The shared keys specified during the configuration of the RADIUS servers take precedence.
The shared keys configured on the device must match those configured on the RADIUS servers.
Examples
# For RADIUS scheme radius1, set the shared key for secure accounting communication to ok in plain
text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] key accounting simple ok