key

Syntax

To assign a RADIUS key:

key secret

no key

To assign a RADIUS relay key:

key ipAddress ipMask relaySecret

no key ipAddress ipMask

To assign an ISAKMP/IKE key:

key keyString

no key

Release Information

Command introduced before JunosE Release 7.1.0.

Description

From RADIUS Configuration mode, specifies the secret for the RADIUS authentication, accounting, dynamic-request server, or preauthentication server that is used to calculate the RADIUS authenticator field during exchanges with the RADIUS server. The no version removes the secret and causes the router to drop all requests for the RADIUS client.

From RADIUS Relay Configuration mode, specifies the IP address and mask of the network that will use the relay authentication or accounting server, and the secret used during exchanges between the RADIUS relay server and client. The no version removes the secret.

From IPSec Manual Key Configuration mode, configures a manual ISAKMP/IKE preshared key. There is no no version. To delete a key, use the no version of the ipsec key manual command.

Options

• secret—Authentication, accounting, dynamic-request, or preauthentication server secret text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the router and a RADIUS server. The router encrypts PPP PAP passwords using this text string.
• ipAddress—IP address for client network
• ipMask—IP mask for the client network
• relaySecret—Text string; up to 32 characters
• keyString—Key value in ASCII format; up to 200 characters

Mode

IPSec Manual Key Configuration, RADIUS Configuration, RADIUS Relay Configuration