Configuring Global RADIUS Keys
You can configure RADIUS keys for all servers used by the Cisco NX-OS device. A RADIUS key is a shared
secret text string between the Cisco NX-OS device and the RADIUS server hosts.
Before you begin
Obtain the RADIUS key values for the remote RADIUS servers.
Configure the RADIUS key on the remote RADIUS servers.
SUMMARY STEPS
1.
configure terminal
2.
radius-server key
[
0
|
6
|
7
]
key-value
3.
exit
4.
(Optional)
show radius-server
5.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch#
configure terminal
switch(config)#
Specifies a RADIUS key for all RADIUS servers. You can
specify that the
key-value
is in clear text format (
0
), is type-6
radius-server key
[
0
|
6
|
7
]
key-value
Example:
Step 2
encrypted (
6
), or is type-7 encrypted (
7
). The Cisco NX-OS
switch(config)#
radius-server key 0 QsEfThUkO
software encrypts a clear text key before saving it to the
running configuration. The default format is clear text. The
maximum length is 63 characters.
Example:
switch(config)#
radius-server key 7 "fewhg”
By default, no RADIUS key is configured.
If you already configured a shared secret using
the
generate type7_encrypted_secret
command, enter it in quotation marks, as shown
in the second example. For more information,
see
Configuring the Shared Secret for RADIUS
Note
Exits configuration mode.
exit
Example:
Step 3
switch(config)#
exit
switch#
Displays the RADIUS server configuration.
(Optional)
show radius-server
Step 4
Example:
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
46
Configuring RADIUS
Configuring Global RADIUS Keys
