Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Guide That Contains This Content
[+] Expand All
[-] Collapse All



    To assign a RADIUS key:

    key secret

    no key

    To assign a RADIUS relay key:

    key ipAddress ipMask relaySecret

    no key ipAddress ipMask

    To assign an ISAKMP/IKE key:

    key keyString

    no key

    Release Information

    Command introduced before JunosE Release 7.1.0.


    From RADIUS Configuration mode, specifies the secret for the RADIUS authentication, accounting, dynamic-request server, or preauthentication server that is used to calculate the RADIUS authenticator field during exchanges with the RADIUS server. The no version removes the secret and causes the router to drop all requests for the RADIUS client.

    From RADIUS Relay Configuration mode, specifies the IP address and mask of the network that will use the relay authentication or accounting server, and the secret used during exchanges between the RADIUS relay server and client. The no version removes the secret.

    From IPsec Manual Key Configuration mode, configures a manual ISAKMP/IKE preshared key. There is no no version. To delete a key, use the no version of the ipsec key manual command.


    • secret—Authentication, accounting, dynamic-request, or preauthentication server secret text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the router and a RADIUS server. The router encrypts PPP PAP passwords using this text string.
    • ipAddress—IP address for client network
    • ipMask—IP mask for the client network
    • relaySecret—Text string; up to 32 characters
    • keyString—Key value in ASCII format; up to 200 characters


    IPsec Manual Key Configuration, RADIUS Configuration, RADIUS Relay Configuration

    Published: 2014-08-20