key
Syntax
To assign a RADIUS key:
key secret
no key
To assign a RADIUS relay key:
key ipAddress ipMask relaySecret
no key ipAddress ipMask
To assign an ISAKMP/IKE key:
key keyString
no key
Release Information
Command introduced before JunosE Release 7.1.0.
Description
From RADIUS Configuration mode, specifies the secret for the RADIUS authentication, accounting, dynamic-request server, or preauthentication server that is used to calculate the RADIUS authenticator field during exchanges with the RADIUS server. The no version removes the secret and causes the router to drop all requests for the RADIUS client.
From RADIUS Relay Configuration mode, specifies the IP address and mask of the network that will use the relay authentication or accounting server, and the secret used during exchanges between the RADIUS relay server and client. The no version removes the secret.
From IPsec Manual Key Configuration mode, configures a manual ISAKMP/IKE preshared key. There is no no version. To delete a key, use the no version of the ipsec key manual command.
Options
- secret—Authentication, accounting, dynamic-request, or preauthentication server secret text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the router and a RADIUS server. The router encrypts PPP PAP passwords using this text string.
- ipAddress—IP address for client network
- ipMask—IP mask for the client network
- relaySecret—Text string; up to 32 characters
- keyString—Key value in ASCII format; up to 200 characters
Mode
IPsec Manual Key Configuration, RADIUS Configuration, RADIUS Relay Configuration
