JUNOSe 9.1.x Command Reference Guide A to M > J-K-L Commands > key

key

Description: 

From RADIUS Configuration mode, specifies the secret for the RADIUS authentication, accounting, dynamic-request server, or preauthentication server that is used to calculate the RADIUS authenticator field during exchanges with the RADIUS server. The no version removes the secret and causes the router to drop all requests for the RADIUS client.

From RADIUS Relay Configuration mode, specifies the IP address and mask of the network that will use the relay authentication or accounting server, and the secret used during exchanges between the RADIUS relay server and client. The no version removes the secret.

From IPSec Manual Key Configuration mode, configures a manual ISAKMP/IKE preshared key. There is no no version. To delete a key, use the no version of the ipsec key manual command.

Syntax: 

To assign a RADIUS key:

key secret

no key

• secret—Authentication, accounting, dynamic-request, or preauthentication server secret text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the router and a RADIUS server. The router encrypts PPP PAP passwords using this text string.

To assign a RADIUS relay key:

key ipAddress ipMask secret

no key ipAddress ipMask

• ipAddress—IP address for client network
• ipMask—IP mask for the client network
• secret—Text string; up to 32 characters

To assign an ISAKMP/IKE key:

key keyString

no key

• keyString—Key value in ASCII format; up to 200 characters

Mode(s): 

IPSec Manual Key Configuration, RADIUS Configuration, RADIUS Relay Configuration

    Release Information    Command introduced before JUNOSe Release 7.1.0.

    Related Topics    

• Configuring RADIUS-Based Mirroring